CVE-2026-46317

The CVE pertains to the Linux kernel KVM on arm64. kvm->arch.nested_mmus[] could be walked under mmu_lock, while kvm_vcpu_init_nested() reallocates and frees the old buffer, risking dereferencing a freed array via the MMU notifier path. The fix moves allocation of the new array outside the loc...