CVE-2026-98638KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() pkvm_vcpu_init_sve() clamps only the upper bound of the host-provided sve_max_vl, so an invalid vector length reaches sve_state_size_from_vl() and the WARN_ON() there, which is fatal at EL2. The existing !sve_state_size test rejects such a length, but only after the macro has run. Check sve_vl_valid() before deriving the state size. A valid length cannot yield a zero size, so the !sve_state_size test goes with it.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5db1bef933427aa467ad89c7b695a84a6b4afe16 before faf66e55e87498ab4bf88cdf9a629e61b3f2d3bc; from 5db1bef933427aa467ad89c7b695a84a6b4afe16 before bae3e4493046de4fefa15f809d9b8dc114e84a3d; 5db1bef933427aa467ad89c7b695a84a6b4afe16 builds before 2a2eb10795a1e495aebc7f829ccecb72c05b4fd9 | CNA record |
References
- https://git.kernel.org/stable/c/faf66e55e87498ab4bf88cdf9a629e61b3f2d3bc
- https://git.kernel.org/stable/c/bae3e4493046de4fefa15f809d9b8dc114e84a3d
- https://git.kernel.org/stable/c/2a2eb10795a1e495aebc7f829ccecb72c05b4fd9
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.