-

CVE-2026-98638

KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

pkvm_vcpu_init_sve() clamps only the upper bound of the host-provided
sve_max_vl, so an invalid vector length reaches sve_state_size_from_vl()
and the WARN_ON() there, which is fatal at EL2. The existing
!sve_state_size test rejects such a length, but only after the macro has
run.

Check sve_vl_valid() before deriving the state size. A valid length
cannot yield a zero size, so the !sve_state_size test goes with it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 5db1bef933427aa467ad89c7b695a84a6b4afe16
Version < faf66e55e87498ab4bf88cdf9a629e61b3f2d3bc
Status affected
Version 5db1bef933427aa467ad89c7b695a84a6b4afe16
Version < bae3e4493046de4fefa15f809d9b8dc114e84a3d
Status affected
Version 5db1bef933427aa467ad89c7b695a84a6b4afe16
Version < 2a2eb10795a1e495aebc7f829ccecb72c05b4fd9
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.055
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/faf66e55e87498ab4bf88cdf9a629e61b3f2d3bc
https://git.kernel.org/stable/c/bae3e4493046de4fefa15f809d9b8dc114e84a3d
https://git.kernel.org/stable/c/2a2eb10795a1e495aebc7f829ccecb72c05b4fd9