CVE-2026-72283
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Nullify irqfd->producer if updating the IRTE for bypass fails, as leaving a dangling pointer will result in a use-after-free if the irqfd is reachable through KVM's routing, but the producer is freed separately. E.g. for VFIO PCI, the producer is embedded in struct "vfio_pci_irq_ctx" and freed when the vector is disabled, which can happen independent of routing updates. [sean: drop PPC change, massage changelog]
How to fix
- Linux Linuxd1379888cc4230bac647ec24ab83306afbd03e88, d5560b6569cd05ba72c6b33427fbabc6ec46b8cf, ed446e8aa894883c08892cfee69782fdf8f6c3ca or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 77e1b8332d1d7aa786f7515e9bd4055def6a1e06 ≤ v < d1379888cc4230bac647ec24ab83306afbd03e88, 77e1b8332d1d7aa786f7515e9bd4055def6a1e06 ≤ v < d5560b6569cd05ba72c6b33427fbabc6ec46b8cf, 77e1b8332d1d7aa786f7515e9bd4055def6a1e06 ≤ v < ed446e8aa894883c08892cfee69782fdf8f6c3ca, 6.17 | d1379888cc4230bac647ec24ab83306afbd03e88, d5560b6569cd05ba72c6b33427fbabc6ec46b8cf, ed446e8aa894883c08892cfee69782fdf8f6c3ca |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.