Get real-time updates on Telegram
CVE-2026-72280: Linux 6.11
CVE-2026-72280. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.00186 (percentile 0.07631), scored 15-Oct-2026.
Affected technology
Linux · 0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f to before 6561597dba97e3e8479a9919bda172cf43eb902c, 0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f to before 5000bcae71c869cba6674c326fec2d8ad659ae3a, 0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f to before 7deadbc5dab5b8e2316364603bc6281129c8461c, 0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f to before 9f1667098c6ae7ec81a9a56859cfdacb822aa0d0
Linux
Linux · 6.11
Linux
Component: Not specified by the source
File: arch/arm64/kvm/hyp/include/hyp/switch.h
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00186 · percentile 0.07631 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-72280.html