CVE-2026-72277: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN isn't memory. This gets particularly hairy if the endpoint doesn't support cacheable memory attributes, potentially throwing an SError on writeback...
While KVM does permit cacheable memory attributes on certain PFNMAP VMAs, kvmtranslatevncr() isn't currently grabbing the VMA. So do the simpler thing for now and just reject everything that isn't memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72277?
CVE-2026-72277 has a risk severity rating of 35.
How do I fix CVE-2026-72277?
To fix CVE-2026-72277, update your Linux kernel to the latest version where the vulnerability has been patched.
What version of the Linux kernel is affected by CVE-2026-72277?
CVE-2026-72277 affects specific versions of the Linux kernel, particularly those prior to the patch release.
What impact does CVE-2026-72277 have on KVM?
CVE-2026-72277 can lead to incorrect memory attributes being used in KVM, potentially allowing unauthorized access or behavior.
Is CVE-2026-72277 specific to arm64 architecture?
Yes, CVE-2026-72277 is specifically related to the KVM implementation on the arm64 architecture.