CVE-2026-89914

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM arm64 component where the decode range tlbi() function failed to perform the required sign extension for Virtual Address (VA) during range-based Translation Lookaside Buffer Invalidation (TLBI). This omission occurred when the helper was transitioned for use with S1 TLBIs. This failure can lead to the overflow of Physical Address (PA) bits during S2 invalidation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.