CVE-2026-98470

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode

kvm pkvm ioctl allowed() WARNs when kvm get cap for kvm ioctl() doesn't find the ioctl number in vm ioctl caps[], and kvm arch vm ioctl() calls it for every number the generic code doesn't handle, so ioctl(vm fd, 0xdeadbeef) from userspace taints a pKVM host and panics it under panic on warn. The lookup is fed userspace input: return false, and userspace gets the -EINVAL kvm arch vm ioctl() returns for that number on a host without pKVM.