docs: disable KVM nested virtualization in Talos install configs (CVE-2026-53359)#602

Open

Andrei Kvapil (kvaps) wants to merge 5 commits into

mainfrom

security/cve-2026-53359-disable-nested-virt

Commits on Jul 8, 2026

docs: disable KVM nested virtualization in Talos install configs (CVE-2026-53359)

Andrei Kvapil (kvaps)
authored and
Aleksei Sviridkin (lexfrei)
committed
docs: pin grubUseUKICmdline=false for Talos >=1.12 so kvm nested args apply (CVE-2026-53359)

Andrei Kvapil (kvaps)
authored and
Aleksei Sviridkin (lexfrei)
committed
docs: drop nested-virt args from pre-1.12 install guides (CVE-2026-53359)

Andrei Kvapil (kvaps)
authored and
Aleksei Sviridkin (lexfrei)
committed
docs: point CVE-2026-53359 mitigation at the Talos image in current install guides
Aleksei Sviridkin (lexfrei)
committed
docs: flag CVE-2026-53359 nested-virt exposure in pre-1.12 install guides
Aleksei Sviridkin (lexfrei)
committed