PT-2026-116856 · Linux · Linux

CVE-2026-98637

·

Published

2026-10-18

·

Updated

2026-10-18

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
pkvm vcpu init sve() clears KVM ARM VCPU SVE in kvm->arch.vcpu features when it fails, but vcpu has sve() tests KVM ARCH FLAG GUEST HAS SVE, which is left set. Later vCPUs on that VM then skip the SVE setup and register with a NULL sve state, which the guest's first FP access hands to sve load state().
Return the error without touching vcpu features.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-98637

Affected Products

Linux