Get real-time updates on Telegram
CVE-2026-72289: Linux 4.7
CVE-2026-72289. CVSS 3.1 base score 9.3 (CRITICAL, Source advisory). EPSS 0.00185 (percentile 0.07549), scored 15-Oct-2026.
Affected technology
Linux · 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before 3893e1fcf6f306b327a8358dcd1cbd077989a240, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before cb3efe1a354f1638726725c3ecee1ce8d1a7e2dc, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before da2d249a39a1881681c303ceea33f38ba1c5bbeb, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before 654be81c4c637af12709d47c7efc3302cd336513, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before e363c0bc0226dc5ea5046a88e9a6864b82c45399, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before 79fdd2aa774e44847cd9bb7edc811e73e3dc7bfe, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before 0658b09cba7fe866c6cd70cd2dcdfdcabe80328f, 0919e84c0fc1fc73525fdcedefab89ea8460f697 to before 0074b82cdfcb5fd13710a0ac308ade68ac6f6fbe
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: arch/arm64/kvm/vgic/vgic.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 37.2 /100 (P4)
- CVSS 3.1
- 9.3 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00185 · percentile 0.07549 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-72289.html