CVE-2026-98713

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Apply the fine-grained UNDEFs without FEAT FGT

FGUs don't actually require hardware support, so don't gate fgt trap config insertion on FGT. This is the only action required to allow FGUs always, as kvm calculate traps() already computes the FGU bits with or without FEAT FGT.

This also fixes a spurious WARN when a TLBI OS is run on a guest in vEL1 without FEAT TLBIOS on non FEAT FGT hardware. In this configuration the course-grained HCR EL2.TTLBOS trap reaches the handler handle tlbi el1(), which expects an EL1 TLBI only from vEL2. With FGUs enabled the UNDEF will be injected without needing the specific handler.

[oliver: Take Wei-Lin's suggested changelog]