In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Don't leak PFN when kvmtranslatevncr() races MMU notifier
In the case that kvmtranslatevncr() races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to kvmreleasefaultin_page() for the unused PFN.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64282.json"
}