CVE-2026-46317 KVM: arm64: Reassign nested_mmus array behind mmu_lock

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind mmulock kvm-arch.nestedmmus is walked under kvm-mmulock, including from the MMU notifier path kvmunmapgfnrange - kvmnesteds2unmap, which can run at any time. kvmvcpuinitnested...

EUVD-2026-35406

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind mmulock kvm-arch.nestedmmus is walked under kvm-mmulock, including from the MMU notifier path kvmunmapgfnrange - kvmnesteds2unmap, which can run at any time. kvmvcpuinitnested...

CVE-2026-46317

The CVE pertains to the Linux kernel KVM on arm64. kvm->arch.nested_mmus[] could be walked under mmu_lock, while kvm_vcpu_init_nested() reallocates and frees the old buffer, risking dereferencing a freed array via the MMU notifier path. The fix moves allocation of the new array outside the loc...

PT-2026-47754

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested mmus array behind mmu lock kvm-arch.nested mmus is walked under kvm-mmu lock, including from the MMU notifier path kvm unmap gfn range - kvm nested s2 unmap, which can run at any time. kvm vcpu init...

UBUNTU-CVE-2026-46317

KVM: arm64: Reassign nestedmmus array behind mmulock...