CVE-2026-89916

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM arm64 implementation where VNCR (Virtual Non-Global Control Register) TLB invalidation does not correctly participate in the MMU invalidation retry mechanism. This can lead to a race condition where one vCPU translates a VNCR and, before it can acquire the MMU lock to insert the TLB entry, another vCPU updates the S1 Page Tables (PTs) with an invalid entry and issues a TLBI S1E2 for that virtual address. Consequently, the first vCPU may insert an invalid TLB entry. The fix involves extending the invalidate vncr va() function to update the mmu invalidate seq counter, ensuring the fault is replayed when the context changes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.