CVE-2026-98877

irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed

When accidentally setting “kvm-arm.vgic_v4_enable=1” on a system that has no MSI controller device tree node and GICv4, it results a panic as “gic_domain” is NULL and the kernel attempts to access it.

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Mem abort info: ESR = 0x0000000096000006

CPU: 1 UID: 0 PID: 295 Comm: lkvm-static Not tainted 7.1.0-rc4-ge3f15ad3970e #5 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 81402005 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __irq_domain_instantiate+0x1d4/0x578 lr : __irq_domain_instantiate+0x1cc/0x578

Set vLPI support to false at init time if the host has no ITS, so it propagates properly to kvm_vgic_global_state.has_gicv4.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before 3e4cae9f1472ba3c9fe87edee24074618b51f537Affected a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before a2508b8855acc96abe69be73b41b672f1ef12516Affected a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before e79934064be85fc9a3a6434da857307d8b78e33dAffected a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before 4761493dd663443f7353c184e6fa16e1cb3ac5a1Affected a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before ab233119a19716b8f33e73ea7e092e0eb353cfbfAffected a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40Affected a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before 3e4cae9f1472ba3c9fe87edee24074618b51f537Affected
a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before a2508b8855acc96abe69be73b41b672f1ef12516Affected
a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before e79934064be85fc9a3a6434da857307d8b78e33dAffected
a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before 4761493dd663443f7353c184e6fa16e1cb3ac5a1Affected
a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before ab233119a19716b8f33e73ea7e092e0eb353cfbfAffected
a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40Affected
a75460547e13c99762c2f9dbfcdd13ad416f91c5 to before e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.