CVE-2026-89914: KVM: arm64: Sign-extend VA for range-based TLBI invalidation
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
When the decoderangetlbi() helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it.
As a result, special care must be taken to not overflow PA bits when this is used for S2 invalidation.
Affected Software
Event History
Frequently Asked Questions
Which systems are affected by this issue?
The issue is in the Linux kernel's KVM implementation for arm64. The provided information does not identify affected kernel versions or configurations beyond use of KVM on arm64.
What condition triggers the flaw?
The flaw is associated with range-based TLBI invalidation after decode_range_tlbi() was reused for stage-1 TLB invalidations without the required virtual-address sign extension. The data does not specify an attacker capability, guest action, or workload needed to trigger it.
Is there a fix available?
Yes. The vulnerability is described as resolved, and three stable-kernel commit references are provided: 72bce82c4171bf330919ff1b64dc0a36c254ec7d, 3feb83918e30f0472e058224b926ebfe8a064fac, and 2393470085649f0b973ecceb26fe8fc71edde0c1.