CVE-2026-72277
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
In the Linux kernel, KVM arm64 (nested mode) unconditionally used cacheable memory attributes for L1 VNCR mappings, even if the underlying PFN is not memory. The fix rejects anything that isn't normal memory to avoid SError issues.
Risk Assessment
This could lead to unexpected SErrors, potentially destabilizing the system or causing crashes.
Recommendation
Install the Linux kernel patch for KVM arm64 that rejects VNCR mappings for non-normal memory.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN isn't memory. This gets particularly hairy if the endpoint doesn't support cacheable memory attributes, potentially throwing an SError on writeback... While KVM does permit cacheable memory attributes on certain PFNMAP VMAs, kvm_translate_vncr() isn't currently grabbing the VMA. So do the simpler thing for now and just reject everything that isn't memory.