CVE-2026-89727

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: GICv2: Don't WARN on out-of-range GICV DIR INTID

vgic v2 deactivate() passes the INTID a guest wrote to GICV DIR straight to vgic get vcpu irq(), and treats a failed lookup as a "can't happen" condition with WARN ON ONCE().

The guest can make it happen at will, though: for any INTID outside of the implemented SGI, PPI and SPI ranges the lookup returns NULL, since GICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID to GICV DIR triggers the WARN, and panics hosts running with panic on warn.

Drop the WARN and ignore failed lookups.