CVE for illumos and distros: VMM/BHYVE
illumos disclosed CVE-2026-102916, a bhyve REP-prefix emulation bug that mishandles CPU flags.
illumos security reported CVE-2026-102916, internal bug 18491, in the bhyve virtual machine monitor. REP-prefix instruction emulation mishandles CPU flags. Emily Albini of Oxide Computer discovered the flaw, and iximeow of Oxide Computer fixed it. The notice does not describe exploitation in the wild.
42