CVE-2026-72283

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the KVM x86 component. The problem occurs when updating the Interrupt Routing Table Entry (IRTE) for bypass fails, leaving a dangling pointer in irqfd->producer. If the irqfd remains reachable through KVM routing while the producer is freed separately—such as when the producer is embedded in the vfio pci irq ctx struct and the vector is disabled—it can lead to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.