SB2026091750 - Improper Check for Unusual or Exceptional Conditions in Linux kernel arm64 kvm

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-89915)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise confidentiality, integrity, and availability.

The vulnerability exists due to improper TLB invalidation handling in the KVM arm64 nested virtualization VNCR mapping logic when an L1 vCPU performs a TLB invalidation. A remote attacker can trigger a TLB invalidation to compromise confidentiality, integrity, and availability.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5453b85c7ebb605febac3df42021f9471663f051
• https://git.kernel.org/stable/c/87c2bbf189829dce4aaada8f82e3d54ccc037976
• https://git.kernel.org/stable/c/c55bc773b6e814406658fae7dc5c15f639ed816e