CVE-2026-89911
HIGH
7,9
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: changed
Confidentiality: low
Integrity: low
Availability: high
Description
AI Translation Available
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly cap TLBI Range to the architural limit
TLB Invalidation by Range has a fairly powerful way of encoding pretty
large ranges in a small number of bits. This range can be based on an
arbitrary VA, which means it is pretty easy for a guest to generate an
overflow should the hypervisor be naive enough to add the range to the
base...
Make sure the range is capped to the limit dictated by the address bit
that determines the VA range. For an IPA invalidation, this is further
corrected down the line to ignore the upper range.
https://git.kernel.org/stable/c/2de38f0448b45d27eba984fc0d9edb7a138972c2
https://git.kernel.org/stable/c/566b1f08d983615f731cc693f2ad59db302c6b57
https://git.kernel.org/stable/c/69a598288195947a1662b53de702eb6976af96b7