CVE-2026-72277

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory

When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable

memory attributes, even if the underlying PFN isn't memory. This gets

particularly hairy if the endpoint doesn't support cacheable memory

attributes, potentially throwing an SError on writeback...

While KVM does permit cacheable memory attributes on certain PFNMAP

VMAs, kvmtranslatevncr() isn't currently grabbing the VMA. So do the

simpler thing for now and just reject everything that isn't memory.