CVE-2026-74568

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the KVM arm64 VGIC implementation between the release of a Logical Peripheral Interrupt (LPI) and its re-registration. The issue occurs because decrementing an LPI's reference count and evicting its structure from the LPI xarray (dist->lpi xa) are not performed as a single atomic step. This can lead to two scenarios: in the direct release path via vgic put irq(), a newly registered LPI may be erroneously deleted from the xarray; in the deferred release path via vgic release deleted lpis(), an old IRQ may be leaked. The flaw is triggered when a guest issues a DISCARD while the LPI is still referenced in a vCPU's active-pending list (ap list) and the same INTID is re-mapped via MAPTI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.