CVE-2026-98877None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed When accidentally setting “kvm-arm.vgic_v4_enable=1” on a system that has no MSI controller device tree node …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
When accidentally setting “kvm-arm.vgic_v4_enable=1” on a system that has no MSI controller device tree node and GICv4, it results a panic as “gic_domain” is NULL and the kernel attempts to access it.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028
Mem abort info:
ESR = 0x0000000096000006
CPU: 1 UID: 0 PID: 295 Comm: lkvm-static Not tainted 7.1.0-rc4-ge3f15ad3970e #5 PREEMPT
Hardware name: linux,dummy-virt (DT)
pstate: 81402005 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __irq_domain_instantiate+0x1d4/0x578
lr : __irq_domain_instantiate+0x1cc/0x578
Set vLPI support to false at init time if the host has no ITS, so it propagates properly to kvm_vgic_global_state.has_gicv4.
Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3e4cae9f1472ba3c9fe87edee24074618b51f537Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a2508b8855acc96abe69be73b41b672f1ef12516Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e79934064be85fc9a3a6434da857307d8b78e33dLinux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4761493dd663443f7353c184e6fa16e1cb3ac5a1Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ab233119a19716b8f33e73ea7e092e0eb353cfbfLinux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5Linux < 5.10.271Linux < 5.15.222Linux < 6.1.189Linux < 6.6.158Linux < 6.12.111Linux < 6.18.53Linux (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99001Nonedrm/xe/i2c: cancel the client work on remove
CVE-2026-98989Nonenamespace: check a recursive bind mount for mount namespace loops
CVE-2026-98988Nonenamespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
CVE-2026-98992Nonenamespace: don't copy an unmounted mount tree
CVE-2026-98991Nonenamespace: queue a mount only once for mount notifications
CVE-2026-98990Nonenamespace: check a submount for references right before unmounting it