CVE-2026-46317

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM arm64 component where the kvm->arch.nested mmus[] array is accessed under the kvm->mmu lock, including within the MMU notifier path via the functions kvm unmap gfn range() and kvm nested s2 unmap(). The function kvm vcpu init nested() reallocates this array and frees the previous buffer while holding only the kvm->arch.config lock, which allows a walker to reference a freed array, potentially leading to a use-after-free scenario.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.