Riskcovery

CVE-2026-98713

KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

FGUs don't actually require hardware support, so don't gate fgt trap config insertion on FGT. This is the only action required to allow FGUs always, as kvm_calculate_traps() already computes the FGU bits with or without FEAT_FGT.

This also fixes a spurious WARN when a TLBI OS is run on a guest in vEL1 without FEAT_TLBIOS on non FEAT_FGT hardware. In this configuration the course-grained HCR_EL2.TTLBOS trap reaches the handler handle_tlbi_el1(), which expects an EL1 TLBI only from vEL2. With FGUs enabled the UNDEF will be injected without needing the specific handler.

[oliver: Take Wei-Lin's suggested changelog]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f to before 2f4a15c52a552c5244ec27f4ca8bda855594f918Affected
  • f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f to before 1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087Affected
  • f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f to before af3300b3a6bace925a496f3520e171c07b999c72Affected
  • f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f to before 4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.