-

CVE-2026-98470

KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode

kvm_pkvm_ioctl_allowed() WARNs when kvm_get_cap_for_kvm_ioctl() doesn't
find the ioctl number in vm_ioctl_caps[], and kvm_arch_vm_ioctl() calls
it for every number the generic code doesn't handle, so
ioctl(vm_fd, 0xdeadbeef) from userspace taints a pKVM host and panics it
under panic_on_warn. The lookup is fed userspace input: return false,
and userspace gets the -EINVAL kvm_arch_vm_ioctl() returns for that
number on a host without pKVM.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version b12b3b04f6ba072ca5a618a75e546c996be94bd1
Version < cc53eb5c6515e3221314624a22c9da9c80a67f63
Status affected
Version b12b3b04f6ba072ca5a618a75e546c996be94bd1
Version < 49d9d295d69d07e850cae35933ba8519e2915f26
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.0
Status affected
Version 0
Version < 7.0
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.043
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/cc53eb5c6515e3221314624a22c9da9c80a67f63
https://git.kernel.org/stable/c/49d9d295d69d07e850cae35933ba8519e2915f26