Improper Check for Unusual or Exceptional Conditions in Linux kernel - CVE-2026-89915
Published: September 17, 2026
Vulnerability identifier: #VU150372
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-89915
CWE-ID: CWE-754
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise confidentiality, integrity, and availability.
The vulnerability exists due to improper TLB invalidation handling in the KVM arm64 nested virtualization VNCR mapping logic when an L1 vCPU performs a TLB invalidation. A remote attacker can trigger a TLB invalidation to compromise confidentiality, integrity, and availability.
Affected software
Linux kernel
How to mitigate CVE-2026-89915
Install security update from vendor's repository.