A vulnerability was found in Linux Kernel up to 7.2-rc3. It has been rated as very critical. Impacted is the function
kvm_io_bus_get_dev of the component KVM. Performing a manipulation results in improper locking.
This vulnerability is reported as CVE-2026-72282. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.
