CVE-2026-98637
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure pkvm_vcpu_init_sve() clears KVM_ARM_VCPU_SVE in kvm->arch.vcpu_features when it fails, but vcpu_has_sve() tests KVM_ARCH_FLAG_GUEST_HAS_SVE, which is left set. Later vCPUs on that VM then skip the SVE setup and register with a NULL sve_state, which the guest's first FP access hands to sve_load_state(). Return the error without touching vcpu_features.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 18, 2026
First seenOct 18, 2026
How to fix
Update
- Linux Linuxbd46b41f412fb81c50bac1a0929ec31320f3a807, f0cd8ffae092cc1b9d7cfa9188ed5a88a374adcb, a1b3c788ad31837e348075e93dbba3f447492776 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5db1bef933427aa467ad89c7b695a84a6b4afe16 ≤ v < bd46b41f412fb81c50bac1a0929ec31320f3a807, 5db1bef933427aa467ad89c7b695a84a6b4afe16 ≤ v < f0cd8ffae092cc1b9d7cfa9188ed5a88a374adcb, 5db1bef933427aa467ad89c7b695a84a6b4afe16 ≤ v < a1b3c788ad31837e348075e93dbba3f447492776, 6.16 | bd46b41f412fb81c50bac1a0929ec31320f3a807, f0cd8ffae092cc1b9d7cfa9188ed5a88a374adcb, a1b3c788ad31837e348075e93dbba3f447492776 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.