CVE-2026-72412

The CVE-2026-72412 entry concerns the Linux kernel s390/mm subsystem and the _PAGE_UNUSED (PAGE_UNUSED) PTE bit. Root cause: KVM could set the bit for unmapped guest pages; later paths could leave it set, so present pages might be treated as unused, risking guest corruption. The fix implemented i...

CVE-2026-72325 perf/x86/amd/core: Avoid enabling BRS from the SVM reload path

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...

EUVD-2026-59194

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

CVE-2026-72295

Technical details (affected product/version, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2026-72295 LoongArch: KVM: Validate irqchip index in irqfd routing

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

CVE-2026-72295 LoongArch: KVM: Validate irqchip index in irqfd routing

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

CVE-2026-72294 LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt Function kvmvcpuioctlinterrupt can be called from userspace, here add irq validility cheking in kvmvcpuioctlinterrupt...

EUVD-2026-59193

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt Function kvmvcpuioctlinterrupt can be called from userspace, here add irq validility cheking in kvmvcpuioctlinterrupt...

CVE-2026-72294 LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt Function kvmvcpuioctlinterrupt can be called from userspace, here add irq validility cheking in kvmvcpuioctlinterrupt...

CVE-2026-72294

The CVE-2026-72294 case affects the Linux kernel on LoongArch under KVM. The vulnerable component is kvm_vcpu_ioctl_interrupt() where irq validity checking was previously missing, allowing potential misvalidation when called from userspace. The root cause is insufficient validation of IRQs in the...

CVE-2026-72292 KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVMS390GETCMMABITS memory kvms390getcmmabits allocates its output buffer with vmalloc, which does not zero the returned pages: values = vmallocargs-count; In the non-peek migration path, datgetcmma reports a...

EUVD-2026-59191

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVMS390GETCMMABITS memory kvms390getcmmabits allocates its output buffer with vmalloc, which does not zero the returned pages: values = vmallocargs-count; In the non-peek migration path, datgetcmma reports a...

CVE-2026-72293 KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radixtreepreload in gaccessshadowfault Add missing radixtreepreload in gaccessshadowfault to guarantee forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order ...

EUVD-2026-59192

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radixtreepreload in gaccessshadowfault Add missing radixtreepreload in gaccessshadowfault to guarantee forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order ...

CVE-2026-72292

The CVE-2026-72292 issue in the Linux kernel affects KVM on s390 where kvm_s390_get_cmma_bits() allocates its output with vmalloc(), which does not zero pages. In the non-peek migration path, dat_get_cmma() reports a byte span from the first to the last dirty page, but __dat_get_cmma_pte() only w...

CVE-2026-72292 KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVMS390GETCMMABITS memory kvms390getcmmabits allocates its output buffer with vmalloc, which does not zero the returned pages: values = vmallocargs-count; In the non-peek migration path, datgetcmma reports a...

CVE-2026-72293

In the Linux kernel CVE-2026-72293, the KVM s390 vsie path is affected: missing radix_tree_preload() in _gaccess_shadow_fault() could stall forward progress. The core of _gaccess_shadow_fault() has been split into ___gaccess_shadow_fault() to simplify locking. The fix adds the missing radix_tree_...

CVE-2026-72293 KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radixtreepreload in gaccessshadowfault Add missing radixtreepreload in gaccessshadowfault to guarantee forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order ...

CVE-2026-72291 KVM: s390: Fix unlikely race in try_get_locked_pte()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix unlikely race in trygetlockedpte Fix an unlikely race in trygetlockedpte, which could have happened if puds or pmds get unmapped between the p?dpget and p?doffset functions...

EUVD-2026-59190

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix unlikely race in trygetlockedpte Fix an unlikely race in trygetlockedpte, which could have happened if puds or pmds get unmapped between the p?dpget and p?doffset functions...