CVE-2026-98713KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT FGUs don't actually require hardware support, so don't gate fgt trap config insertion on FGT. This is the only action required to allow FGUs always, as kvm_calculate_traps() already computes the FGU bits with or without FEAT_FGT. This also fixes a spurious WARN when a TLBI OS is run on a guest in vEL1 without FEAT_TLBIOS on non FEAT_FGT hardware. In this configuration the course-grained HCR_EL2.TTLBOS trap reaches the handler handle_tlbi_el1(), which expects an EL1 TLBI only from vEL2. With FGUs enabled the UNDEF will be injected without needing the specific handler. [oliver: Take Wei-Lin's suggested changelog]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f before 2f4a15c52a552c5244ec27f4ca8bda855594f918; from f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f before 1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087; from f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f before af3300b3a6bace925a496f3520e171c07b999c72; from f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f before 4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07 | CNA record |
References
- https://git.kernel.org/stable/c/2f4a15c52a552c5244ec27f4ca8bda855594f918
- https://git.kernel.org/stable/c/1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087
- https://git.kernel.org/stable/c/af3300b3a6bace925a496f3520e171c07b999c72
- https://git.kernel.org/stable/c/4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.