SB2026061024 - Double free in Linux kernel kvm vgic

Description

This security bulletin contains information about 1 vulnerability.

1) Double free (CVE-ID: CVE-2026-46316)

CWE-ID: CWE-415 - Double Free

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a double free in vgic_its_invalidate_cache() in the KVM arm64 vgic-its translation cache when invalidating cache entries concurrently. A local user can trigger concurrent cache invalidation paths to cause a denial of service.

The issue occurs because multiple contexts can drain the same cache at the same time, allowing an entry to be freed while an ITE still maps it.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/13031fb6b8357fbbcded2a7f4cba73e4781ee594
• https://git.kernel.org/stable/c/2bbc395e81bd29c543a0529a678327e932a7ec69
• https://git.kernel.org/stable/c/9121f4605ab94969f62d1b5714ca3c6c69bd202f
• https://git.kernel.org/stable/c/b7b72e88046328c9fdc638fe887d4240257dd5dc