AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72283

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's KVM component, specifically related to the handling of IRQFD (interrupt request file descriptor) when updating the Interrupt Routing Table Entry (IRTE). A failure in this update can lead to a use-after-free condition due to a dangling pointer, potentially allowing an attacker to exploit the system. Organizations utilizing KVM on Linux should prioritize this issue to mitigate risks associated with potential privilege escalation or system instability.

CVE
CVE-2026-72283
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Nullify irqfd->producer if updating the IRTE for bypass fails, as leaving a dangling pointer will result in a use-after-free if the irqfd is reachable through KVM's routing, but the producer is freed separately. E.g. for VFIO PCI, the producer is embedded in struct "vfio_pci_irq_ctx" and freed when the vector is disabled, which can happen independent of routing updates. [sean: drop PPC change, massage changelog]