CVE-2026-64288

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM arm64 nv component where a NULL VNCR pseudo-TLB may be dereferenced. This occurs during VNCR TLB invalidation triggered by MMU notifiers or TLBI instructions, which can race against a vcpu that has not yet been onlined, meaning no pseudo-TLB has been allocated. Additionally, invalidation should be skipped if the TLB is invalid. While kvm invalidate vncr ipa() performs the necessary checks, the kvm invalidate vncr va() function fails to check for allocation and blindly dereferences the pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.