In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore… (CVE-2026-72284)
A vulnerability in the Linux kernel's KVM x86 subsystem has been resolved. The issue involves ignoring a pending Paravirtualized End Of Interrupt (PV EOI) request if the virtual CPU (vCPU) has disabled PV EOIs since the request was made. Failure to handle this condition correctly can lead to a kernel bug and invalid opcode exception, causing system instability or crashes.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel KVM x86 component arises when the internal "service pending PV EOI" request is not ignored despite the vCPU having disabled PV EOIs after the request was made. This can cause an assertion failure in pv_eoi_get_user() if reading guest memory fails and the vCPU disables PV EOIs concurrently. The resulting kernel bug manifests as an invalid opcode exception and system crash, as demonstrated by a kernel oops trace in the lapic synchronization code path.
Potential Impact
This vulnerability can cause kernel crashes (BUG and Oops) in virtualized environments using KVM on x86 architectures. Such crashes can lead to denial of service for affected virtual machines or hosts. There is no indication of privilege escalation or data corruption from the provided information.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to resolve the issue. Since no vendor advisory or patch link is provided, users should monitor the official Linux kernel repositories or their distribution's security advisories for the relevant patch. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore… (CVE-2026-72284)
Description
A vulnerability in the Linux kernel's KVM x86 subsystem has been resolved. The issue involves ignoring a pending Paravirtualized End Of Interrupt (PV EOI) request if the virtual CPU (vCPU) has disabled PV EOIs since the request was made. Failure to handle this condition correctly can lead to a kernel bug and invalid opcode exception, causing system instability or crashes.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel KVM x86 component arises when the internal "service pending PV EOI" request is not ignored despite the vCPU having disabled PV EOIs after the request was made. This can cause an assertion failure in pv_eoi_get_user() if reading guest memory fails and the vCPU disables PV EOIs concurrently. The resulting kernel bug manifests as an invalid opcode exception and system crash, as demonstrated by a kernel oops trace in the lapic synchronization code path.
Potential Impact
This vulnerability can cause kernel crashes (BUG and Oops) in virtualized environments using KVM on x86 architectures. Such crashes can lead to denial of service for affected virtual machines or hosts. There is no indication of privilege escalation or data corruption from the provided information.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to resolve the issue. Since no vendor advisory or patch link is provided, users should monitor the official Linux kernel repositories or their distribution's security advisories for the relevant patch. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4wpm-cf5q-x355
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72284"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b72bf8831d5394fcc8c
Added to database: 08/15/2026, 15:53:22 UTC
Last enriched: 08/15/2026, 16:42:34 UTC
Last updated: 08/16/2026, 00:41:15 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.