CVE-2026-43351: KVM: arm64: Eagerly init vgic dist/redist on vgic creation
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Eagerly init vgic dist/redist on vgic creation
If vgicallocateprivateirqslocked() fails for any odd reason, we exit kvmvgiccreate() early, leaving dist->rdregions uninitialised.
kvmvgicdistdestroy() then comes along and walks into the weeds trying to free the RDs. Got to love this stuff.
Solve it by moving all the static initialisation early, and make sure that if we fail halfway, we're in a reasonable shape to perform the rest of the teardown. While at it, reset the vgic model on failure, just in case...
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43351?
CVE-2026-43351 has been classified as a medium-severity vulnerability due to potential impacts on stability.
How do I fix CVE-2026-43351?
To fix CVE-2026-43351, you should update to the latest version of the Linux kernel that contains the appropriate patches.
Which systems are affected by CVE-2026-43351?
CVE-2026-43351 primarily affects the Linux kernel for KVM on arm64 architectures.
What are the potential impacts of CVE-2026-43351?
The potential impacts of CVE-2026-43351 include stability issues resulting from improper initialization of the virtual generic interrupt controller.
Is there a workaround for CVE-2026-43351 if I can't update?
There are no reliable workarounds for CVE-2026-43351, so updating the kernel is the recommended action.