Is CVE-2026-81627 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-81627?

CVE-2026-81627 has a CVSS v3 severity of MEDIUM (6.7).

Back

CVE-2026-81627

Description

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset D_LCK protection and injecting code into System Management Mode memory.