CVE-2026-98469

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Fix AArch32 DBGBXVR handling

The consolidation of the breakpoint and watchpoint register accessors switched DBGBXVR from trap bvr() to trap dbg wb reg(). The latter selects backing storage with demux wb reg(), which only handles Op2 values 4 through 7. Since DBGBXVR uses Op2 1, an AArch32 guest access hits KVM BUG ON() and marks the VM dead.

DBGBXVR aliases DBGBVR EL1[63:32], and its AA32(HI) descriptor already selects the upper half. Map Op2 1 to dbg bvr[] alongside Op2 4, restoring the pre-regression behavior.