CVE-2026-89727
- Source
- https://cve.org/CVERecord?id=CVE-2026-89727
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89727.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-89727
- Downstream
- Published
- 2026-09-11T19:46:38Z
- Modified
- 2026-09-13T03:47:20Z
- Summary
- KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID
vgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR straight to vgic_get_vcpu_irq(), and treats a failed lookup as a "can't happen" condition with WARN_ON_ONCE().
The guest can make it happen at will, though: for any INTID outside of the implemented SGI, PPI and SPI ranges the lookup returns NULL, since GICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID to GICV_DIR triggers the WARN, and panics hosts running with panic_on_warn.
Drop the WARN and ignore failed lookups.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89727.json" }- References
-
- https://git.kernel.org/stable/c/78b95c571d021391153a5ac7981e9e4d5cc856a3
- https://git.kernel.org/stable/c/c6d9c8ac6521d3049ec90ac58bebd23ed03ac496
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89727.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-89727
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git