CVE-2026-80873

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Write ESR EL2 for injected nested SError exceptions

kvm inject el2 exception() writes ESR EL2 for synchronous exceptions but not for SError. enter exception64() does not write ESR ELx for any exception type, so the constructed syndrome is dropped. A guest L2 hypervisor taking a nested SError observes stale ESR EL2.

This affects both kvm inject nested serror() and the EASE path in kvm inject nested sea().

Write ESR EL2 for except type serror, matching except type sync.