SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-64282

MEDIUM · CVSS 4.7 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's KVM module on arm64 architectures, where a race condition in the kvm_translate_vncr() function can lead to a reference leak of the page frame number (PFN) when an MMU notifier is triggered. This could potentially allow unauthorized access to sensitive memory information. Organizations utilizing Linux on arm64 systems, particularly those running virtualized environments, should prioritize applying the relevant patches to mitigate this risk.

CVE
CVE-2026-64282
Severity
MEDIUM
CVSS
4.7
EPSS
0.10%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

Related CVEs

Other vulnerabilities affecting the same vendor(s)