Riskcovery

CVE-2026-64282

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 069a05e53549685d2b5e54ceb51db1fd04aa50d7 to before 0c93681aea0a1b8be14730a88abe77c840272e41Affected
  • 069a05e53549685d2b5e54ceb51db1fd04aa50d7 to before cd1067ccc0dbc18890a74db116d00a4bc3c7f2f7Affected
  • 069a05e53549685d2b5e54ceb51db1fd04aa50d7 to before 9f76b039a72d7e06374aa96862f0232ed53f7787Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.