CVE-2026-72284
Description
A flaw was found in the Kernel-based Virtual Machine (KVM) subsystem of the Linux kernel, specifically in the handling of Paravirtualized End Of Interrupt (PV EOI) for x86 virtual CPUs. A local attacker in a guest virtual machine could exploit a race condition where a virtual CPU disables PV EOIs after a request has been made. This can lead to an assertion failure, causing a kernel panic and resulting in a denial of service on the host system.
Statement
This vulnerability is rated as Moderate impact because triggering the issue requires local access within an x86 guest virtual machine to induce a race condition during interrupt servicing, restricting the blast radius to host denial of service without compromising data confidentiality or system integrity. In Red Hat Enterprise Linux environments, exposure is limited to hypervisors hosting untrusted x86 virtual machine workloads. Systems that do not provide virtualization services or run only fully trusted guests are not at risk.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7 | N/A | 7.1 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | High | N/A | Low |
| Privileges Required | Low | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Changed |
| Confidentiality | High | N/A | None |
| Integrity Impact | High | N/A | None |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
