CVE-2026-72280

CVE-2026-72280

High · published August 15, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2

It is entirely possible for a guest to write to the ZCR_EL2 sysreg alias

while in a nested context, as it is expected if FEAT_NV2 is advertised

to the L1 hypervisor.

Get rid of the bogus WARN which, since the hyp vectors were installed at

this point, has the effect of a hyp_panic...

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Published
2026-08-15T10:21Z
References (4)
EPSS history
Timeline
  • 15 AUG 05:55Z
    KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2
    cvelistv5