SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-72291

CRITICAL · CVSS 9.3 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A race condition vulnerability exists in the Linux kernel's KVM component, specifically in the `try_get_locked_pte()` function, which could be exploited if page table entries are unmapped during certain operations. This could lead to potential memory corruption or instability in virtualized environments. Organizations utilizing Linux-based systems, particularly those leveraging KVM for virtualization, should prioritize applying the relevant patches to mitigate this risk.

CVE
CVE-2026-72291
Severity
CRITICAL
CVSS
9.3
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix unlikely race in try_get_locked_pte() Fix an unlikely race in try_get_locked_pte(), which could have happened if puds or pmds get unmapped between the p?dp_get() and p?d_offset() functions.