CVE-2026-72287

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM nVMX component where the consistency check between vmcs12.tpr threshold and the virtual APIC vTPR was performed too late in the process. When EPT (Extended Page Tables) is disabled, this delay can lead to a failure to unwind vmcs01.GUEST CR3 to the correct KVM value, resulting in the system running L1 with a CR3 controlled by L1 instead of KVM. To resolve this, the consistency check is moved to the normal controls checks, and vTPR is accessed via regular guest memory access using a VM-scoped API to ensure it hits non-SMM memslots.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.