71 matches found
PT-2026-135789
In pkvm guest relinquish to host of mem protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-135698
In pkvm load tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-89981
A flaw was found in the Linux kernel, specifically affecting arm64 architectures. When the Memory Tagging Extension MTE is disabled, the kernel attempts to read a register GMIDEL1 that should not be accessed. In a virtualized environment utilizing protected Kernel-based Virtual Machine pKVM, this...
CVE-2026-98638
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem on ARM64 systems. This vulnerability can lead to a Denial of Service DoS by causing a fatal hypervisor crash. The Protected KVM pKVM hypervisor does not properly validate the Scalable Vector Extension SVE vector...
SUSE CVE-2026-98470
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
DEBIAN-CVE-2026-98470
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
CVE-2026-98470
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
UBUNTU-CVE-2026-98470
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
CVE-2026-98470
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
CVE-2026-98470 KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
CVE-2026-98470 KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
CVE-2026-98470
The Linux kernel contains a vulnerability in the KVM subsystem on arm64 architectures. The function kvm_pkvm_ioctl_allowed() issues a WARNING when kvm_get_cap_for_kvm_ioctl() fails to find an ioctl number in vm_ioctl_caps[]. Because kvm_arch_vm_ioctl() calls this check for unhandled numbers, an a...
EUVD-2026-103710
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
PT-2026-116857
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 component, the pkvm vcpu init sve function only clamps the upper bound of the host-provided sve max vl variable. This allows an invalid vector length to reach the sve...
PT-2026-116689
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvm pkvm ioctl allowed WARNs when kvm get cap for kvm ioctl doesn't find the ioctl number in vm ioctl caps, and kvm arch vm ioctl calls it for every number the gener...
CVE-2026-98470: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvmpkvmioctlallowed WARNs when kvmgetcapforkvmioctl doesn't find the ioctl number in vmioctlcaps, and kvmarchvmioctl calls it for every number the generic code doesn...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from KVM arm64’s improper handling of user-space inputs when searching for unknown VM ioctl operations in protected mode. This improper handling triggers a WARN message and causes the pKVM host to crash...
SUSE CVE-2026-89981
In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMIDEL1 when MTE is disabled cpuinfostorecpu gates the GMIDEL1 read on the raw IDAA64PFR1EL1, so it reads the register even when the kernel has disabled MTE CONFIGARM64MTE=n or arm64.nomte. KVM sets HCREL2.TID5 ...
CVE-2026-89981
In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMIDEL1 when MTE is disabled cpuinfostorecpu gates the GMIDEL1 read on the raw IDAA64PFR1EL1, so it reads the register even when the kernel has disabled MTE CONFIGARM64MTE=n or arm64.nomte. KVM sets HCREL2.TID5 ...
CVE-2026-89981 arm64: Don't read GMID_EL1 when MTE is disabled
In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMIDEL1 when MTE is disabled cpuinfostorecpu gates the GMIDEL1 read on the raw IDAA64PFR1EL1, so it reads the register even when the kernel has disabled MTE CONFIGARM64MTE=n or arm64.nomte. KVM sets HCREL2.TID5 ...