SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89727

UNKNOWN · CVSS N/A EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's KVM component, specifically in the handling of out-of-range interrupt identifiers (INTIDs) for the GICv2 architecture. An attacker with guest access can exploit this flaw to trigger a warning that may lead to a host panic, particularly on systems configured to panic on warnings. Organizations utilizing Linux-based virtualization environments, especially those running KVM on arm64 architectures, should prioritize addressing this issue to prevent potential denial-of-service conditions.

CVE
CVE-2026-89727
Severity
UNKNOWN
CVSS
N/A
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID vgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR straight to vgic_get_vcpu_irq(), and treats a failed lookup as a "can't happen" condition with WARN_ON_ONCE(). The guest can make it happen at will, though: for any INTID outside of the implemented SGI, PPI and SPI ranges the lookup returns NULL, since GICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID to GICV_DIR triggers the WARN, and panics hosts running with panic_on_warn. Drop the WARN and ignore failed lookups.