CVE-2026-72280 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 It is entirely possible for a guest to write to the ZCR_EL2 sysreg alias while in a nested context, as it is expected if FEAT_NV2 is advertised to the L1 hypervisor. Get rid of the bogus WARN which, since the hyp vectors were installed at this point, has the effect of a hyp_panic...

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/5000bcae71c869cba6674c326fec2d8ad659ae3a
https://git.kernel.org/stable/c/6561597dba97e3e8479a9919bda172cf43eb902c
https://git.kernel.org/stable/c/7deadbc5dab5b8e2316364603bc6281129c8461c
https://git.kernel.org/stable/c/9f1667098c6ae7ec81a9a56859cfdacb822aa0d0

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 It is entirely possible for a guest to write to the ZCR_EL2 sysreg alias while in a nested context, as it is expected if FEAT_NV2 is advertised to the L1 hypervisor. Get rid of the bogus WARN which, since the hyp vectors were installed at this point, has the effect of a hyp_panic...
Title		KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/5000bcae71c869cba6674c326fec2d8ad659ae3a https://git.kernel.org/stable/c/6561597dba97e3e8479a9919bda172cf43eb902c https://git.kernel.org/stable/c/7deadbc5dab5b8e2316364603bc6281129c8461c https://git.kernel.org/stable/c/9f1667098c6ae7ec81a9a56859cfdacb822aa0d0

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:55:04.969Z

Updated: 2026-08-15T05:55:04.969Z

Reserved: 2026-08-09T03:40:39.916Z

Link: CVE-2026-72280

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:58.270

Modified: 2026-08-15T06:21:58.270

Link: CVE-2026-72280

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72280", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.916Z", "datePublished": "2026-08-15T05:55:04.969Z", "dateUpdated": "2026-08-15T05:55:04.969Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:55:04.969Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2\n\nIt is entirely possible for a guest to write to the ZCR_EL2 sysreg alias\nwhile in a nested context, as it is expected if FEAT_NV2 is advertised\nto the L1 hypervisor.\n\nGet rid of the bogus WARN which, since the hyp vectors were installed at\nthis point, has the effect of a hyp_panic..."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/arm64/kvm/hyp/include/hyp/switch.h"], "versions": [{"version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "lessThan": "6561597dba97e3e8479a9919bda172cf43eb902c", "status": "affected", "versionType": "git"}, {"version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "lessThan": "5000bcae71c869cba6674c326fec2d8ad659ae3a", "status": "affected", "versionType": "git"}, {"version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "lessThan": "7deadbc5dab5b8e2316364603bc6281129c8461c", "status": "affected", "versionType": "git"}, {"version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "lessThan": "9f1667098c6ae7ec81a9a56859cfdacb822aa0d0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/arm64/kvm/hyp/include/hyp/switch.h"], "versions": [{"version": "6.11", "status": "affected"}, {"version": "0", "lessThan": "6.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc4", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.2-rc4"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6561597dba97e3e8479a9919bda172cf43eb902c"}, {"url": "https://git.kernel.org/stable/c/5000bcae71c869cba6674c326fec2d8ad659ae3a"}, {"url": "https://git.kernel.org/stable/c/7deadbc5dab5b8e2316364603bc6281129c8461c"}, {"url": "https://git.kernel.org/stable/c/9f1667098c6ae7ec81a9a56859cfdacb822aa0d0"}], "title": "KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/arm64/kvm/hyp/include/hyp/switch.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6561597dba97e3e8479a9919bda172cf43eb902c", "status": "affected", "version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "versionType": "git"}, {"lessThan": "5000bcae71c869cba6674c326fec2d8ad659ae3a", "status": "affected", "version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "versionType": "git"}, {"lessThan": "7deadbc5dab5b8e2316364603bc6281129c8461c", "status": "affected", "version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "versionType": "git"}, {"lessThan": "9f1667098c6ae7ec81a9a56859cfdacb822aa0d0", "status": "affected", "version": "0cfc85b8f5cf3b77463d61542191c75ba0cc3a5f", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/arm64/kvm/hyp/include/hyp/switch.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"lessThan": "6.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc4", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2\n\nIt is entirely possible for a guest to write to the ZCR_EL2 sysreg alias\nwhile in a nested context, as it is expected if FEAT_NV2 is advertised\nto the L1 hypervisor.\n\nGet rid of the bogus WARN which, since the hyp vectors were installed at\nthis point, has the effect of a hyp_panic..."}], "id": "CVE-2026-72280", "lastModified": "2026-08-15T06:21:58.270", "metrics": {}, "published": "2026-08-15T06:21:58.270", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5000bcae71c869cba6674c326fec2d8ad659ae3a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6561597dba97e3e8479a9919bda172cf43eb902c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7deadbc5dab5b8e2316364603bc6281129c8461c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9f1667098c6ae7ec81a9a56859cfdacb822aa0d0"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}