{"id":"CVE-2026-98712","revision":"fa6e91163f5542b1853901c816a70301","records":[{"revision":"fa6e91163f5542b1853901c816a70301","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98712","aliases":[],"title":"KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq\n\nReferencing the last interrupt inserted in an LR is rather fragile, as\nthis interrupt can vanish if a concurrently unmapped LPI.\n\nSolve this by bumping up the refcount on the interrupt when populating\nlast_lr_irq, and drop it at vgic_prune_ap_list() time, when LPIs are\nbeing reclaimed.","state":0,"publishedAt":"2026-10-18T15:46:44.857+00:00","modifiedAt":"2026-10-19T09:24:23.386+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/arm64/kvm/vgic/vgic.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6da5e537f5afe091658e846da1949d7e557d2ade\",\n                            \"lessThan\": \"8b25393d16a5ca8df907bd7ee1ff2e9d85678b3c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6da5e537f5afe091658e846da1949d7e557d2ade\",\n                            \"lessThan\": \"19bc5d79ece613f242b5ec03921a3b465321bfed\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cd28ca4c27ed5929f61bbed8a967c20519facb88\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.19.9\",\n                            \"lessThan\": \"6.20\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/arm64/kvm/vgic/vgic.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"7.0\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.10\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/8b25393d16a5ca8df907bd7ee1ff2e9d85678b3c","https://git.kernel.org/stable/c/19bc5d79ece613f242b5ec03921a3b465321bfed"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98712","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98712","identifiers":["CVE-2026-98712"]},"retained":false,"historicalAffected":[]}],"coverage":[]}