CVE-2026-64282

Summary

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux069a05e53549685d2b5e54ceb51db1fd04aa50d7 < 0c93681aea0a1b8be14730a88abe77c840272e41affected
LinuxLinux069a05e53549685d2b5e54ceb51db1fd04aa50d7 < cd1067ccc0dbc18890a74db116d00a4bc3c7f2f7affected
LinuxLinux069a05e53549685d2b5e54ceb51db1fd04aa50d7 < 9f76b039a72d7e06374aa96862f0232ed53f7787affected
LinuxLinux6.16affected
LinuxLinux0 < 6.16unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References