CVE-2026-89914

9.3 Critique

Publiée le 16/09/2026 à 13:17 · Modifiée le 19/10/2026 à 11:18 · Reçue · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decode_range_tlbi() helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it. As a result, special care must be taken to not overflow PA bits when this is used for S2 invalidation.

Traduire en français

Produits concernés

Linux

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.3 Critique	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`

Références

https://git.kernel.org/stable/c/2393470085649f0b973ecceb26fe8fc71edde0c1
https://git.kernel.org/stable/c/3feb83918e30f0472e058224b926ebfe8a064fac
https://git.kernel.org/stable/c/72bce82c4171bf330919ff1b64dc0a36c254ec7d

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories