CVE-2026-46316
KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry
CVSS score
9.3
EPSS probability
%0.2
Risk score
0.0
Published
4 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-64561 and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page
Similar Vulnerabilities
9.8
CVE-2022-30333 Actively exploitedPath traversal in N/a
Patch verifiedEPSS %99
7.8
CVE-2022-0847 Actively exploitedkernel: improper initialization of the "flags" member of the new pipe_buffer
VendorRed HatProduct8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.10-202203101736_8.5.src+24 etkilenen
RH
Patch verified Public Exploits:8EPSS %93
7.8
CVE-2018-15982 Actively exploitedUse after free in N/a
Patch verified Public Exploits:1EPSS %90
8.8
CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb frags
Patch verified Public Exploits:3EPSS %94
7.8
CVE-2019-13272 Actively exploitedkernel: broken permission and object lifetime handling for PTRACE_TRACEME
Patch verified Public Exploits:12EPSS %52
7.4
CVE-2021-3493 Actively exploitedkernel: overlayfs file system caps privilege escalation
Workaround Public Exploits:8EPSS %49
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-46316"