Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rvp6-qppr-rmf4

Опубликовано: 25 июл. 2026
Источник: github
Github: Не прошло ревью

Описание

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier

In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

EPSS

Процентиль: 10%
0.00198
Низкий

Связанные уязвимости

ubuntu
8 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

CVSS3: 5.5
redhat
8 дней назад

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) for arm64 architectures. A race condition between the `kvm_translate_vncr()` function and an MMU (Memory Management Unit) notifier can lead to a Page Frame Number (PFN) leak. This occurs because an early return in `kvm_translate_vncr()` fails to release a reference on a faulted-in PFN, potentially leading to resource exhaustion or information disclosure.

nvd
8 дней назад

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier In the case that kvm_translate_vncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvm_release_faultin_page() for the unused PFN.

debian
8 дней назад

In the Linux kernel, the following vulnerability has been resolved: K ...

EPSS

Процентиль: 10%
0.00198
Низкий