CVE-2026-89727: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID vgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR straight to vgic_get_vcpu_irq(), and treats a failed lookup as a "can't happen" condition with WARN_ON_ONCE(). The guest can make it happen at will, though: for any INTID outside of the implemented SGI, PPI and SPI ranges the lookup returns NULL, since GICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID to GICV_DIR triggers the WARN, and panics hosts running with panic_on_warn. Drop the WARN and ignore failed lookups.

Засегнати продукти

• Linux Linux: 255de897e7fb918a34845167c572b5bf8e1d9d79 преди 78b95c571d021391153a5ac7981e9e4d5cc856a3; 255de897e7fb918a34845167c572b5bf8e1d9d79 преди c6d9c8ac6521d3049ec90ac58bebd23ed03ac496
• Linux Linux: 6.19; преди 6.19; 7.2.4 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-89727
• https://nvd.nist.gov/vuln/detail/CVE-2026-89727
• https://git.kernel.org/stable/c/78b95c571d021391153a5ac7981e9e4d5cc856a3
• https://git.kernel.org/stable/c/c6d9c8ac6521d3049ec90ac58bebd23ed03ac496