CVE-2026-72281

{"id": "CVE-2026-72281", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4e6e03f9eaddb6be5ca8477dc5642e94ddece47e", "lessThan": "34d8d7242c52c174add6b413d56420aa60f8054c", "versionType": "git"}, {"status": "affected", "version": "4e6e03f9eaddb6be5ca8477dc5642e94ddece47e", "lessThan": "d098bb75d14fde2f12155f1a95ec0168160867ce", "versionType": "git"}], "programFiles": ["arch/arm64/kvm/pkvm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7.1"}, {"status": "unaffected", "version": "0", "lessThan": "7.1", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/arm64/kvm/pkvm.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:21:58.433", "references": [{"url": "https://git.kernel.org/stable/c/34d8d7242c52c174add6b413d56420aa60f8054c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d098bb75d14fde2f12155f1a95ec0168160867ce", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: account pKVM reclaim against the VM mm\n\nProtected guest faults charge long term pins to the VM's mm. Teardown\ncan run later from file release, where current->mm may be unrelated.\n\nDrop the charge from kvm->mm instead."}], "lastModified": "2026-08-17T06:18:30.710", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}