CVE-2026-98713
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT FGUs don't actually require hardware support, so don't gate fgt trap config insertion on FGT. This is the only action required to allow FGUs always, as kvm_calculate_traps() already computes the FGU bits with or without FEAT_FGT. This also fixes a spurious WARN when a TLBI OS is run on a guest in vEL1 without FEAT_TLBIOS on non FEAT_FGT hardware. In this configuration the course-grained HCR_EL2.TTLBOS trap reaches the handler handle_tlbi_el1(), which expects an EL1 TLBI only from vEL2. With FGUs enabled the UNDEF will be injected without needing the specific handler. [oliver: Take Wei-Lin's suggested changelog]
How to fix
- Linux Linux2f4a15c52a552c5244ec27f4ca8bda855594f918, 1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087, af3300b3a6bace925a496f3520e171c07b999c72, 4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f ≤ v < 2f4a15c52a552c5244ec27f4ca8bda855594f918, f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f ≤ v < 1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087, f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f ≤ v < af3300b3a6bace925a496f3520e171c07b999c72, f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f ≤ v < 4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07, 6.9 | 2f4a15c52a552c5244ec27f4ca8bda855594f918, 1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087, af3300b3a6bace925a496f3520e171c07b999c72, 4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.