CVE-2026-64286 | Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3 KVM arm64 flush_hyp_vcpu null pointer dereference

July 25, 2026 Yanac

A vulnerability classified as very critical was found in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3. The impacted element is the function flush_hyp_vcpu of the component KVM arm64. The manipulation results in null pointer dereference.

This vulnerability is reported as CVE-2026-64286. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More