Home

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Using "(u64 __user *)hva + offset" to get the virtual addresses of S1/S2 descriptors looks really wrong, if offset is not zero. What we want to get for swapping is hva + offset, not hva + offset*8. ;-) Fix it.

PUBLISHED Reserved 2026-03-09 | Published 2026-04-24 | Updated 2026-04-27 | Assigner Linux




HIGH: 8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Product status

Default status
unaffected

f6927b41d57390c597a126063e2e518911976878 (git) before 4307e05e568782fc92eff651b09ee5dee88a058d
affected

f6927b41d57390c597a126063e2e518911976878 (git) before 0496acc42fb51eee040b5170cec05cec41385540
affected

Default status
affected

6.19
affected

Any version before 6.19
unaffected

6.19.11 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/4307e05e568782fc92eff651b09ee5dee88a058d

git.kernel.org/...c/0496acc42fb51eee040b5170cec05cec41385540

cve.org (CVE-2026-31553)

nvd.nist.gov (CVE-2026-31553)

Download JSON