CVE-2026-74514

A flaw was found in the KVM Kernel-based Virtual Machine s390 PCI component. Incorrect memory accounting in the accountmem and unaccountmem functions, specifically related to the handling of pinned and unpinned pages, can lead to a resource leak. This occurs because the reference count for user...

CVE-2026-72412

A flaw was found in the Linux kernel's memory management for s390 systems. An internal flag, intended to mark guest memory pages for discard after unmapping by the Kernel-based Virtual Machine KVM, was not consistently cleared when those pages were subsequently reused. This improper handling coul...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2026-72278

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 systems. This vulnerability occurs when a guest operating system attempts to access the Virtualization Nested Control Register VNCR page. If the guest reads from VNCR before writing to it, KVM may incorrectly handle...

CVE-2026-72295

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for LoongArch architecture. An unvalidated interrupt controller irqchip index in the irqfd routing mechanism could allow a local attacker to perform an out-of-bounds memory access. This could lead to a denial of service or...

CVE-2026-72291

A flaw was found in the Linux kernel, specifically within the Kernel-based Virtual Machine KVM for the s390 architecture. An unlikely race condition exists in the trygetlockedpte function. This issue could occur if page table entries are unmapped during specific memory management operations. The...

CVE-2026-72288

A flaw was found in the KVM Kernel-based Virtual Machine component for ARM64 architecture in the Linux kernel. This vulnerability arises from a race condition within the virtual Generic Interrupt Controller vgic when an interrupt's processor affinity is changed at the same time its Locality-aware...

CVE-2026-72286

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM with Secure Encrypted Virtualization SEV and Secure Nested Paging SNP virtual machines. The intra-host migration and mirroring feature is not fully implemented for SEV-SNP VMs. This incomplete implementation means that critic...

CVE-2026-72284

A flaw was found in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel, specifically in the handling of Paravirtualized End Of Interrupt PV EOI for x86 virtual CPUs. A local attacker in a guest virtual machine could exploit a race condition where a virtual CPU disables PV EOIs aft...

CVE-2026-72283

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability occurs when the system fails to update an Interrupt Remapping Table Entry IRTE for a bypass operation, which can leave a pointer to a memory location that has already been freed a 'dangling...

CVE-2026-72282

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. The kvmiobusgetdev function, responsible for retrieving I/O bus devices, could return a device that is only matched by its memory address. This creates a race condition where the device might be deallocated before...

CVE-2026-72279

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. KVM on arm64 architectures incorrectly maps the L1 Virtual Nested Control Register VNCR into the host stage-1, failing to respect read-only memory regions. This could allow a malicious guest to write to a...

CVE-2026-72294

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component, specifically within the LoongArch architecture. The kvmvcpuioctlinterrupt function, which can be invoked from userspace, lacks proper validation of interrupt requests. This missing validity check could allow a loca...

CVE-2026-72293

A flaw was found in the kernel's KVM Kernel-based Virtual Machine s390 vsie component. A missing radixtreepreload call in the gaccessshadowfault function can prevent the system from guaranteeing forward progress. This could lead to system instability or a Denial of Service DoS, where the system...

CVE-2026-72281

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architectures. This vulnerability involves an issue with memory accounting for protected guest faults. During the teardown process, the system may incorrectly manage long-term memory pins, potentially leading to...

CVE-2026-72285

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine TDX Trust Domain Extensions module. A local attacker, by concurrently modifying the CPUID entry count during the initialization of a virtual machine, could cause the CPUID parsing to access memory beyond the intended...

CVE-2026-72280

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architectures. A guest operating system, when operating in a nested virtualization environment, could trigger a hypervisor panic hyppanic by writing to the ZCREL2 system register alias. This issue leads to a denial ...

CVE-2026-72290

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for s390 PCI. During the setup of guest interrupt forwarding, a reference count refcount to the Guest Interrupt Service Call GISC may not be properly released if subsequent setup steps fail. This resource leak can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-72287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into normal checks Move the off-by-default consistency check for vmcs12.tprthreshold vs. the virtual AP...

Linux Distros Unpatched Vulnerability : CVE-2026-72290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvms390giscregister registers the guest ISC before pinning the guest interrupt forwarding pages and...