CVE-2026-89775: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Computing the effects of a TLB invalidation involves looking at the size of the mapping cached by the TLB. For S1 mappings such as VNCR, this is deducted from...

PT-2026-93552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 implementation, a flaw exists in how TLB Invalidation by Range is handled. Because the range can be based on an arbitrary Virtual Address VA, a guest could potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-89917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Handle VNCR TLB invalidation race with vcpuput VNCR unmapping While VNCR TLB invalidation always occurs under the MMU lock, vcpuput doesn't, while i...

Linux Distros Unpatched Vulnerability : CVE-2026-89914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decoderangetlbi helper was moved to be used for S1 TLBIs, the required sign extension was...

PT-2026-93381

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.17 through 6.18.50 Linux kernel versions 7.0 through 7.2.4 Description A flaw in the Linux kernel's KVM virtualization code for ARM64 processors can allow a guest virtual machine to escape to the host system. The issue...

Linux Distros Unpatched Vulnerability : CVE-2026-89916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry A VNCR TLB invalidation can occur on one vcpu while another vcpu is faulting in this sa...

Linux Distros Unpatched Vulnerability : CVE-2026-89981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: Don't read GMIDEL1 when MTE is disabled cpuinfostorecpu gates the GMIDEL1 read on the raw IDAA64PFR1EL1, so it reads the register even when the kernel ha...

Linux Distros Unpatched Vulnerability : CVE-2026-89918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Correctly handle end of VA space TLBI invalidation Our TLB invalidation by VA code is based on comparing two ranges, one defined by the TLB, and one...

PT-2026-93559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component regarding Translation Lookaside Buffer TLB invalidation by Virtual Address VA. The system compares two ranges—one defined by the TLB and one by...

Linux Distros Unpatched Vulnerability : CVE-2026-89911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small numb...

Linux Distros Unpatched Vulnerability : CVE-2026-89912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and...

Linux Distros Unpatched Vulnerability : CVE-2026-89915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Remove VM-wide VNCR mapping counter The global VNCR mapping counter is used to decide whether an L1 provided VNCR page is mapped in L0 on any CPU at...

CVE-2026-89913: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgicv3savependingtables vgicv3savependingtables iterates dist-lpixa using xaforeach and dereferences the returned struct vgicirq in the loop body without holding a reference on the LP...

EUVD-2026-79011

In ARM64TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79003

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

A race condition in trusty_dputc of generic-arm64-smcall.c allows for a possible out-of-bounds write . This vulnerability could lead to a local escalation of privilege , requiring System execution privileges . No user interaction is required for exploitation. The issue affects the Trusty componen...

USN-8761-1 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

CVE-2026-58701: Concurrent Execution using Shared Resource with Improper Synchronization

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...