In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

FGUs don't actually require hardware support, so don't gate fgt trap
config insertion on FGT. This is the only action required to allow FGUs
always, as kvm_calculate_traps() already computes the FGU bits with or
without FEAT_FGT.

This also fixes a spurious WARN when a TLBI OS is run on a guest in vEL1
without FEAT_TLBIOS on non FEAT_FGT hardware. In this configuration the
course-grained HCR_EL2.TTLBOS trap reaches the handler handle_tlbi_el1(),
which expects an EL1 TLBI only from vEL2. With FGUs enabled the UNDEF
will be injected without needing the specific handler.

[oliver: Take Wei-Lin's suggested changelog]

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f affected < 2f4a15c52a552c5244ec27f4ca8bda855594f918
f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f affected < 1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087
f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f affected < af3300b3a6bace925a496f3520e171c07b999c72
f5a5a406b4b8bb6c1fc7a1e92a872bd86061a53f affected < 4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07
Linux Linux affected
Version Status Constraints
6.9 affected —
0 unaffected < 6.9
6.12.113 unaffected ≤ 6.12.*
6.18.56 unaffected ≤ 6.18.*
7.2.10 unaffected ≤ 7.2.*
7.3-rc6 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087 cve-icon cve-icon
https://git.kernel.org/stable/c/2f4a15c52a552c5244ec27f4ca8bda855594f918 cve-icon cve-icon
https://git.kernel.org/stable/c/4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07 cve-icon cve-icon
https://git.kernel.org/stable/c/af3300b3a6bace925a496f3520e171c07b999c72 cve-icon cve-icon
History

Sun, 18 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
CWE-607

Sun, 18 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT FGUs don't actually require hardware support, so don't gate fgt trap config insertion on FGT. This is the only action required to allow FGUs always, as kvm_calculate_traps() already computes the FGU bits with or without FEAT_FGT. This also fixes a spurious WARN when a TLBI OS is run on a guest in vEL1 without FEAT_TLBIOS on non FEAT_FGT hardware. In this configuration the course-grained HCR_EL2.TTLBOS trap reaches the handler handle_tlbi_el1(), which expects an EL1 TLBI only from vEL2. With FGUs enabled the UNDEF will be injected without needing the specific handler. [oliver: Take Wei-Lin's suggested changelog]
Title KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:46:45.902Z

Reserved: 2026-09-25T10:25:14.365Z

Link: CVE-2026-98713

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:24.857

Modified: 2026-10-18T16:17:24.857

Link: CVE-2026-98713

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T19:30:14Z

Weaknesses