Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-89914

KVM: arm64: Sign-extend VA for range-based TLBI invalidation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decode_range_tlbi() helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it. As a result, special care must be taken to not overflow PA bits when this is used for S2 invalidation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 85bba00425ae0b4b30938ebfdde6d986e5423aff to < 72bce82c4171bf330919ff1b64dc0a36c254ec7daffected
  • 85bba00425ae0b4b30938ebfdde6d986e5423aff to < 3feb83918e30f0472e058224b926ebfe8a064facaffected
  • 85bba00425ae0b4b30938ebfdde6d986e5423aff to < 2393470085649f0b973ecceb26fe8fc71edde0c1affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References