Riskcovery

CVE-2026-98712

KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI.

Solve this by bumping up the refcount on the interrupt when populating last_lr_irq, and drop it at vgic_prune_ap_list() time, when LPIs are being reclaimed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6da5e537f5afe091658e846da1949d7e557d2ade to before 8b25393d16a5ca8df907bd7ee1ff2e9d85678b3cAffected
  • 6da5e537f5afe091658e846da1949d7e557d2ade to before 19bc5d79ece613f242b5ec03921a3b465321bfedAffected
  • cd28ca4c27ed5929f61bbed8a967c20519facb88Affected
  • 6.19.9 to before 6.20Affected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.