PT-2026-72478

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvm s390 gisc register registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the later setup steps fails, t...

PT-2026-72467

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currently maps the L1 VNCR into the host stage-1 by relying entirely on the permissions of the guest stage-1. At the same time, it is entirely possible that the backi...

PT-2026-72967

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow registering adapter interrupts without first unregistering. So reject any request to enable interrupt forwarding if its...

Linux Distros Unpatched Vulnerability : CVE-2026-72288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim reports some really bad races should the following situation occur...

Linux Distros Unpatched Vulnerability : CVE-2026-74518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: fix list corruption in allocatefileregionentries allocatefileregionentries tops up resv-regioncache with freshly allocated fileregion descriptors. T...

Linux Distros Unpatched Vulnerability : CVE-2026-74517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Cancel and flush the I/O APIC's delayed EOI handling work during the pre VM destroy phase...

Linux Distros Unpatched Vulnerability : CVE-2026-74568

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic: Fix race between LPI release and re-registration Fix a potential race between decrementing an LPI's reference count and evicting that structu...

Linux Distros Unpatched Vulnerability : CVE-2026-72284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal service pending PV EOI request if the vCPU has disabled PV EOIs sin...

Linux Distros Unpatched Vulnerability : CVE-2026-74515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow registering adapter interrupts without first...

Linux Distros Unpatched Vulnerability : CVE-2026-74514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid which increments the reference count of...

PT-2026-72473

In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVM TDX INIT VM if userspace changes cpuid.nent between the initial read and the subsequent copy of the initialization data. tdx td init first reads user...

PT-2026-72481

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radix tree preload in gaccess shadow fault Add missing radix tree preload in gaccess shadow fault to guarantee forward progress. The core of gaccess shadow fault has been split into gaccess shadow fau...

PT-2026-72482

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm vcpu ioctl interrupt Function kvm vcpu ioctl interrupt can be called from userspace, here add irq validility cheking in kvm vcpu ioctl interrupt...

PT-2026-72470

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm io bus get dev locking responsibilities to callers kvm io bus get dev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected...

PT-2026-72471

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd-producer if updating IRTE for bypass fails Nullify irqfd-producer if updating the IRTE for bypass fails, as leaving a dangling pointer will result in a use-after-free if the irqfd is reachable through KVM'...

PT-2026-72468

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR EL2 It is entirely possible for a guest to write to the ZCR EL2 sysreg alias while in a nested context, as it is expected if FEAT NV2 is advertised to the L1 hypervisor. Get rid of...

PT-2026-72472

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

PT-2026-72465

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN isn't memory. This gets particularly hairy if the...

PT-2026-72476

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim reports some really bad races should the following situation occur: - LPI-I is pending in vcpu-B's AP list - vcpu-A writes to vcpu-B's ...

RLSA-2026:54443 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 Bug Fixes and...