Riskcovery

CVE-2026-98638

KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

pkvm_vcpu_init_sve() clamps only the upper bound of the host-provided sve_max_vl, so an invalid vector length reaches sve_state_size_from_vl() and the WARN_ON() there, which is fatal at EL2. The existing !sve_state_size test rejects such a length, but only after the macro has run.

Check sve_vl_valid() before deriving the state size. A valid length cannot yield a zero size, so the !sve_state_size test goes with it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5db1bef933427aa467ad89c7b695a84a6b4afe16 to before faf66e55e87498ab4bf88cdf9a629e61b3f2d3bcAffected
  • 5db1bef933427aa467ad89c7b695a84a6b4afe16 to before bae3e4493046de4fefa15f809d9b8dc114e84a3dAffected
  • 5db1bef933427aa467ad89c7b695a84a6b4afe16 to before 2a2eb10795a1e495aebc7f829ccecb72c05b4fd9Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.