Lucene search
+L

CVE-2026-72287 KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks

🗓️ 15 Aug 2026 05:55:09Reported by LinuxType 
cvelist
 cvelist
🔗 www.cve.org👁 29 Views

KVM nVMX vTPR/TPR threshold check moved to normal flow, preventing L1 guest CR3 hijack when EPT disabled.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
astralinux
AstraLinux
Astra Linux – Vulnerability in Linux 5.10
24 Aug 202610:19
–astralinux
circl
Circl
CVE-2026-72287
1 Oct 202618:00
–circl
cve
CVE
CVE-2026-72287
15 Aug 202605:55
–cve
debiancve
Debian CVE
CVE-2026-72287
15 Aug 202605:55
–debiancve
euvd
EUVD
EUVD-2026-59186
15 Aug 202605:55
–euvd
nvd
NVD
CVE-2026-72287
15 Aug 202606:22
–nvd
osv-bell
osv-bell
BELL-CVE-2026-72287 CVE-2026-72287 does not affect BellSoft software
18 Aug 202606:06
–osv-bell
osv-debian
osv-debian
DEBIAN-CVE-2026-72287
15 Aug 202606:22
–osv-debian
osv-ubuntu
osv-ubuntu
UBUNTU-CVE-2026-72287
15 Aug 202606:22
–osv-ubuntu
osv-usn
osv-usn
USN-8816-1 linux, linux-aws, linux-aws-7.0, linux-hwe-7.0, linux-ibm, linux-oracle, linux-raspi, linux-realtime vulnerabilities
24 Sep 202615:00
–osv-usn
Rows per page
[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/x86/kvm/vmx/nested.c"
    ],
    "versions": [
      {
        "version": "1100e4910ad207bc00aedc8dfdb228dd1b81f310",
        "lessThan": "7d066368f72e6192af7e21c5817626f6da666991",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1100e4910ad207bc00aedc8dfdb228dd1b81f310",
        "lessThan": "ebdac7554abb347ca4197be241116842161acd9b",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/x86/kvm/vmx/nested.c"
    ],
    "versions": [
      {
        "version": "6.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 2026 05:42Current
CVSS 3.17.8
EPSS0.00141
29