PT-2026-121900

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Derive GUEST HAS SVE from the SVE feature bit at EL2 pkvm init features from host takes KVM ARCH FLAG GUEST HAS SVE and KVM ARM VCPU SVE from the host separately, but pkvm vcpu init sve tests the bit while vcpu has sv...

CVE-2026-23107

CVE-2026-23107 describes a Linux kernel issue in arm64/fpsimd where restoring a ZA (Streaming/SME) context could leave sve_state NULL if allocated late, causing a NULL pointer dereference when the kernel stores register state if TIF_SME is set. The root cause is that restore_za_context() failed t...