CVE-2026-63941

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM arm64 implementation regarding how the ZCR EL2 register is handled for VHE guest hypervisors. When a guest hypervisor updates ZCR EL2 via ZCR EL1, the value is not sanitized. Consequently, during the SVE context restoration for an L2 guest, the raw value is written to the hardware, allowing the L2 guest to access Vector Lengths (VLs) beyond the permitted limits. SVE (Scalable Vector Extension) is an architecture extension that allows for variable-length vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.