CVE-2026-89918

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM arm64 component regarding Translation Lookaside Buffer (TLB) invalidation by Virtual Address (VA). The system compares two ranges—one defined by the TLB and one by the TLBI instruction—using a start address and a size. Because the comparison uses base + size, it fails to account for address rollover when the expression represents the last page or block in the TTBR1 VA space, resulting in a value of 0 and a failed TLB invalidation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.