Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-31553

KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Using "(u64 __user *)hva + offset" to get the virtual addresses of S1/S2 descriptors looks really wrong, if offset is not zero. What we want to get for swapping is hva + offset, not hva + offset*8. ;-) Fix it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f6927b41d57390c597a126063e2e518911976878 to < 4307e05e568782fc92eff651b09ee5dee88a058daffected
  • f6927b41d57390c597a126063e2e518911976878 to < 0496acc42fb51eee040b5170cec05cec41385540affected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 6.19.11 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References