ITScape

ITScape: Guest-to-Host Escape in KVM/arm64 Abstract This document describes the ITScape CVE-2026-46316 vulnerability reported and patched by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/arm64 environment and run commands on the host with kerne...

ALSA-2026:92208 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check t...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check t...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability in the arch/arm64/kvm/vgic/vgic.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...

CVE-2026-89913

A flaw was found in the KVM Kernel-based Virtual Machine arm64 vgic-v3 component of the Linux kernel. A race condition exists where the vgicv3savependingtables function can dereference a freed vgicirq structure due to improper handling of LPI Locality-sensitive Paging Interrupt references. This...

SUSE CVE-2026-98712

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

Linux Distros Unpatched Vulnerability : CVE-2026-98712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vani...

DEBIAN-CVE-2026-98712

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98712

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

UBUNTU-CVE-2026-98712

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98712

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

EUVD-2026-103966

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98712 KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98712 KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98712

The Linux kernel contains a vulnerability in the KVM arm64 vgic component related to how the last_lr_irq is handled. The issue arises because referencing the last interrupt inserted in an LR is fragile, as the interrupt can vanish if an LPI is concurrently unmapped. The fix involves bumping the r...

CVE-2026-98712

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

PT-2026-116931

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by last lr irq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

CVE-2026-98712: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by lastlrirq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.19.9 to 6.20 and 7.0 contain security vulnerabilities. This vulnerability stems from KVM arm64 vgic not maintaining a reference count on the interrupt referenced by lastlrirq. As a result, the interrupt may disappear when the LPI is unmapped concurrently...