🟠 High | Source: Microsoft Security Response Center
CVE-2026-64561 is a vulnerability in the Linux Kernel Virtual Machine (KVM) hypervisor’s x86 memory management unit (MMU), where a failure to correctly sequence root page table checks could expose invalid or obsolete memory state. This affects virtualised environments — including Azure-hosted Linux VMs — where KVM is used as the underlying hypervisor component. The flaw could potentially be exploited to cause memory corruption or information disclosure within virtualised workloads.
Security Architect’s Take: Monitor Microsoft’s patch guidance for affected Azure VM SKUs and Linux guest OS images using KVM; prioritise patching Linux kernel versions in guest VMs where KVM x86 MMU is in use, and review any shared-tenancy or nested virtualisation configurations for elevated exposure.
Original advisory: CVE-2026-64561 KVM: x86: Check for invalid/obsolete root after making MMU pages available