Riskcovery

CVE-2026-98637

KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

pkvm_vcpu_init_sve() clears KVM_ARM_VCPU_SVE in kvm->arch.vcpu_features when it fails, but vcpu_has_sve() tests KVM_ARCH_FLAG_GUEST_HAS_SVE, which is left set. Later vCPUs on that VM then skip the SVE setup and register with a NULL sve_state, which the guest's first FP access hands to sve_load_state().

Return the error without touching vcpu_features.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5db1bef933427aa467ad89c7b695a84a6b4afe16 to before bd46b41f412fb81c50bac1a0929ec31320f3a807Affected
  • 5db1bef933427aa467ad89c7b695a84a6b4afe16 to before f0cd8ffae092cc1b9d7cfa9188ed5a88a374adcbAffected
  • 5db1bef933427aa467ad89c7b695a84a6b4afe16 to before a1b3c788ad31837e348075e93dbba3f447492776Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.