CVE-2026-72279

🎯 CVE-2026-72279 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-72279 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currently maps the L1 VNCR into the host stage-1 by relying entirely on the permissions of the guest stage-1. At the same time, it is entirely possible that the backing PFN is read-only (e.g. RO memslot), meaning that the L1 VNCR should use at most a read-only mapping. Cache the writability of the PFN in the VNCR TLB and use it

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR

KVM currently maps the L1 VNCR into the host stage-1 by relying entirely
on the permissions of the guest stage-1. At the same time, it is
entirely possible that the backing PFN is read-only (e.g. RO memslot),
meaning that the L1 VNCR should use at most a read-only mapping.

Cache the writability of the PFN in the VNCR TLB and use it to constrain
the resulting fixmap permissions. Promote VNCR permission faults to an
SEA in the case where the guest attempts to write to a read-only
endpoint. Conveniently, this also plugs a page leak found by Sashiko [*]
resulting from the early return for a read-only PFN.

Klassifikation & Betroffenheit:

Linux Linux patch: 7.1.5Linux patch: 0Linux 2a359e072596fcb2e9e85017a865e3618a2fe5b5 <d35defbdfcb15296ebe28968ad7452c1a8c11ceaLinux 6.16Linux patch: 6.18.40Linux 2a359e072596fcb2e9e85017a865e3618a2fe5b5 <5c50db5bcbb9073cb2fd97be51b962de92f429e9Linux 2a359e072596fcb2e9e85017a865e3618a2fe5b5 <2684e02bac41c5220f6c1ab2bdcc957b71812977Linux patch: 7.2

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-74705 10.0 CVE-2026-74612 10.0 CVE-2026-74475 10.0 CVE-2026-74309 10.0 CVE-2026-74280 10.0

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 6.18.40 🩹 Kernel ≥ 7.1.5

🇩🇪 BSI-Sicherheitshinweise: BSI · hoch · Linux Kernel: Mehrere Schwachstellen ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 08/2026

Heute 19.10.

CVSS-Vektor-Analyse: 9.0

AV · Angriffsvektor Lokal

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Keine

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

CNA-Bewertung (Linux): 9.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Veröffentlicht:15.08.2026

Aktualisiert:17.08.2026 06:18

Assigner (CNA):Linux

EUVD-ID:EUVD-2026-59178

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	CVEs	Anteil
≥90 %	723	0,2 %
≥50 %	3.221	0,9 %
≥10 %	22.089	5,9 %
<10 %	346.202	93,0 %

Noch keine Analyse zu CVE-2026-72279

Beitrag zu CVE-2026-72279 verfassen

Zero-Day & Vulnerability Intelligence Hub