---
id: CVE-2026-98877
title: 'irqchip/gic-v4: Don''t advertise VLPIs if no ITS is probed'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed

  When accidentally setting “kvm-arm.vgic_v4_enable=1” on a system that has
  no MSI controller device tree node …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    3e4cae9f1472ba3c9fe87edee24074618b51f537
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    a2508b8855acc96abe69be73b41b672f1ef12516
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    e79934064be85fc9a3a6434da857307d8b78e33d
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    4761493dd663443f7353c184e6fa16e1cb3ac5a1
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ab233119a19716b8f33e73ea7e092e0eb353cfbf
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5
  - Linux < 5.10.271
  - Linux < 5.15.222
  - Linux < 6.1.189
  - Linux < 6.6.158
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:37:23.678Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98877'
references:
  - url: 'https://git.kernel.org/stable/c/3e4cae9f1472ba3c9fe87edee24074618b51f537'
  - url: 'https://git.kernel.org/stable/c/a2508b8855acc96abe69be73b41b672f1ef12516'
  - url: 'https://git.kernel.org/stable/c/e79934064be85fc9a3a6434da857307d8b78e33d'
  - url: 'https://git.kernel.org/stable/c/4761493dd663443f7353c184e6fa16e1cb3ac5a1'
  - url: 'https://git.kernel.org/stable/c/ab233119a19716b8f33e73ea7e092e0eb353cfbf'
  - url: 'https://git.kernel.org/stable/c/c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40'
  - url: 'https://git.kernel.org/stable/c/e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.583Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed

When accidentally setting “kvm-arm.vgic_v4_enable=1” on a system that has
no MSI controller device tree node and GICv4, it results a panic as
“gic_domain” is NULL and the kernel attempts to access it.

    Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028
    Mem abort info:
      ESR = 0x0000000096000006

    CPU: 1 UID: 0 PID: 295 Comm: lkvm-static Not tainted 7.1.0-rc4-ge3f15ad3970e #5 PREEMPT
    Hardware name: linux,dummy-virt (DT)
    pstate: 81402005 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
    pc : __irq_domain_instantiate+0x1d4/0x578
    lr : __irq_domain_instantiate+0x1cc/0x578

Set vLPI support to false at init time if the host has no ITS, so it
propagates properly to kvm_vgic_global_state.has_gicv4.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3e4cae9f1472ba3c9fe87edee24074618b51f537`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a2508b8855acc96abe69be73b41b672f1ef12516`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e79934064be85fc9a3a6434da857307d8b78e33d`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4761493dd663443f7353c184e6fa16e1cb3ac5a1`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ab233119a19716b8f33e73ea7e092e0eb353cfbf`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5`
- `Linux < 5.10.271`
- `Linux < 5.15.222`
- `Linux < 6.1.189`
- `Linux < 6.6.158`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.