CVE-2026-72281: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: account pKVM reclaim against the VM mm Protected guest faults charge long term pins to the VM's mm. Teardown can run later from file release, where current->mm may be unrelated. Drop the charge from kvm->mm instead.

Affected products

• Linux Linux: from 7.1, before 7.1.5 (fixed in 7.1.5)

Published 2026-08-15. Last modified 2026-08-17.