Analysis of CVE-2026-53360: KVM SEV-SNP Guest-to-Host Heap OOB Vulnerability and Fix

The post discusses CVE-2026-53360, a heap out-of-bounds (OOB) vulnerability in KVM’s SEV-SNP feature that allows a guest VM to corrupt host memory. It references a blog detailing the discovery of the bug and notes that another researcher identified it first. The post also includes an analysis of the upstream fix for the vulnerability.