PT-2026-90443 · Linux · Linux
CVE-2026-89727
·
Published
2026-09-11
·
Updated
2026-09-11
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: GICv2: Don't WARN on out-of-range GICV DIR INTID
vgic v2 deactivate() passes the INTID a guest wrote to GICV DIR straight
to vgic get vcpu irq(), and treats a failed lookup as a "can't happen"
condition with WARN ON ONCE().
The guest can make it happen at will, though: for any INTID outside of
the implemented SGI, PPI and SPI ranges the lookup returns NULL, since
GICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID
to GICV DIR triggers the WARN, and panics hosts running with
panic on warn.
Drop the WARN and ignore failed lookups.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux