CVE-2026-64282 PUBLISHED

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

Assigner: Linux
Reserved: 19.07.2026 Published: 25.07.2026 Updated: 25.07.2026

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 069a05e53549685d2b5e54ceb51db1fd04aa50d7 to 0c93681aea0a1b8be14730a88abe77c840272e41 (excl.)
  • affected from 069a05e53549685d2b5e54ceb51db1fd04aa50d7 to cd1067ccc0dbc18890a74db116d00a4bc3c7f2f7 (excl.)
  • affected from 069a05e53549685d2b5e54ceb51db1fd04aa50d7 to 9f76b039a72d7e06374aa96862f0232ed53f7787 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.16 is affected
  • unaffected from 0 to 6.16 (excl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.4 to 7.1.* (incl.)
  • unaffected from 7.2-rc1 to * (incl.)

References