9.3

CVE-2026-89914

KVM: arm64: Sign-extend VA for range-based TLBI invalidation

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Sign-extend VA for range-based TLBI invalidation

When the decode_range_tlbi() helper was moved to be used for S1 TLBIs,
the required sign extension was omitted. Add it.

As a result, special care must be taken to not overflow PA bits when
this is used for S2 invalidation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 85bba00425ae0b4b30938ebfdde6d986e5423aff
Version < 72bce82c4171bf330919ff1b64dc0a36c254ec7d
Status affected
Version 85bba00425ae0b4b30938ebfdde6d986e5423aff
Version < 3feb83918e30f0472e058224b926ebfe8a064fac
Status affected
Version 85bba00425ae0b4b30938ebfdde6d986e5423aff
Version < 2393470085649f0b973ecceb26fe8fc71edde0c1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.076
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.3 2.5 6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/72bce82c4171bf330919ff1b64dc0a36c254ec7d
https://git.kernel.org/stable/c/3feb83918e30f0472e058224b926ebfe8a064fac
https://git.kernel.org/stable/c/2393470085649f0b973ecceb26fe8fc71edde0c1