CVE-2026-89913

A flaw was found in the KVM Kernel-based Virtual Machine arm64 vgic-v3 component of the Linux kernel. A race condition exists where the vgicv3savependingtables function can dereference a freed vgicirq structure due to improper handling of LPI Locality-sensitive Paging Interrupt references. This...

CVE-2026-89913

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgicv3savependingtables vgicv3savependingtables iterates dist-lpixa using xaforeach and dereferences the returned struct vgicirq in the loop body without holding a reference on the LP...