In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic: Free private_irqs when init fails after allocation
Companion to commit 250f25367b58 ("KVM: arm64: Tear down vGIC on failed vCPU creation"), which added the missing kvmvgicvcpudestroy() call to the kvmsharehyp() failure path in kvmarchvcpucreate(). The kvmvgicvcpu_init() failure path immediately above it has the same shape and still needs the same cleanup.
Call kvmvgicvcpudestroy() when kvmvgicvcpuinit() fails so private IRQs allocated before a redistributor iodev registration failure are released before the failed vCPU is freed.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64105.json",
"cna_assigner": "Linux"
}