CVE-2026-89914: KVM: arm64: Sign-extend VA for range-based TLBI invalidation

Severity: critical (CVSS 9.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-16 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decode_range_tlbi() helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it. As a result, special care must be taken to not overflow PA bits when this is used for S2 invalidation.

Affected products

Linux kernel: 6.16 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/2393470085649f0b973ecceb26fe8fc71edde0c1
https://git.kernel.org/stable/c/3feb83918e30f0472e058224b926ebfe8a064fac
https://git.kernel.org/stable/c/72bce82c4171bf330919ff1b64dc0a36c254ec7d

Get alerted when CVE-2026-89914 or the next vulnerability affects your stack