CVE-2026-89911

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the KVM arm64 implementation, a flaw exists in how TLB Invalidation by Range is handled. Because the range can be based on an arbitrary Virtual Address (VA), a guest could potentially trigger an overflow if the hypervisor adds the range to the base without proper validation. This occurs because the system fails to correctly cap the TLB Invalidation range to the architectural limit determined by the address bit of the VA range.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.