In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83"
],
"severity": "High",
"spl": "2026-11-05",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "49834273037572263619446392223332175688",
"length": 781
},
"id": "ASB-A-503393436-0adda136",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/hyp-main.c",
"function": "handle_pvm_exit_hvc64"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75807680236695890645755707207861727897",
"31291124023213094693044151026138197481",
"307605994916153441207111033080392979589",
"331730783526925694871429204343848373665"
],
"threshold": 0.9
},
"id": "ASB-A-503393436-1aa6a3c1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/pkvm.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "252442305863561103203046561383934272015",
"length": 392
},
"id": "ASB-A-503393436-23cda5d7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/hyp-main.c",
"function": "handle_pvm_entry_hvc64"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"152745081260939237771957464786039842640",
"79467218147546574078702932408427812314",
"172891374428148811225022764462599598093",
"336555105384930116625516939032916808309",
"35711830376579545858543025656482423418",
"13837479832938214074545461729594654878",
"118250729808435755326105876086533350245",
"19591151607873295815119113881728988245",
"165372679515904151166237804763476904414",
"313329963613700883582054172326228188339",
"77315352938976093089604269585934182473",
"171707947975508161229110240363652563906"
],
"threshold": 0.9
},
"id": "ASB-A-503393436-38d42b08",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/hyp-main.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"4478629840211484403400395111576225909",
"115561327416178083369265561645159288070",
"199590378233093536078617001187060567008",
"104731726849405555727696398041479382532",
"120938642420533641783037333146346074553",
"66619602439845363072444435316624732069",
"257374604058682551420943527625030818266",
"61695607715397742707097956946815486287",
"316253384984403865063597103208072719785",
"135055180028347132926811464836519640230",
"118163496502676271178804692280764877655",
"35004203038027695082723789716292392645"
],
"threshold": 0.9
},
"id": "ASB-A-503393436-7935a783",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/device/device.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26167397814916814693953320124088210937",
"length": 2749
},
"id": "ASB-A-503393436-8ff85975",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/pkvm.c",
"function": "kvm_handle_pvm_hvc64"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238926578365453023064716436457282549732",
"length": 417
},
"id": "ASB-A-503393436-a4ba85e0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/device/device.c",
"function": "pkvm_devices_teardown"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"143593216130788537744410156671898500176",
"183885375643397954208862132819967894459",
"94295141480565056190328512521482938690",
"15455272266477852923714134864889884419"
],
"threshold": 0.9
},
"id": "ASB-A-503393436-cc9e823e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/include/nvhe/pkvm.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"86550440323970874420761470902285448579",
"280186435682231576219745945867521915808",
"308905320501898527035221858221102719096",
"45645802980150982193116837214353137267"
],
"threshold": 0.9
},
"id": "ASB-A-503393436-e1885875",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "include/kvm/device.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "141437306912940628137599659188605689878",
"length": 500
},
"id": "ASB-A-503393436-e1ba7cb3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/kernel/common/+/ba356506706b7bd953c501ea91ee7c0d55c1ad83",
"target": {
"file": "arch/arm64/kvm/hyp/nvhe/device/device.c",
"function": "__pkvm_device_assign"
}
}
]
}