CVE-2026-89914
CRITICALCVSS 9.3Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decode_range_tlbi() helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it. As a result, special care must be taken to not overflow PA bits when this is used for S2 invalidation.
Timeline
Published:September 16th, 2026 11:17 AM
Last modified:October 19th, 2026 9:18 AM
CVSS Scoring
CVSS v3: 9.3 (CRITICAL)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute