Unrated severityNVD Advisory· Published Feb 23, 2024· Updated Dec 20, 2025
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
CVE-2024-26598
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes.
Have vgic_its_check_cache() raise the refcount on the returned vgic_irq and add the corresponding decrement after queueing the interrupt.
Affected products
105- osv-coords104 versionspkg:deb/ubuntu/linux-aws@6.5.0-1021.21?arch=source&distro=manticpkg:deb/ubuntu/linux-laptop@6.5.0-1017.20?arch=source&distro=manticpkg:deb/ubuntu/linux-oem-6.5pkg:deb/ubuntu/linux-oracle@6.5.0-1024.24?arch=source&distro=manticpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/kernel-default-base&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/kernel-default-base&distro=SUSE%20Manager%20Server%204.3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/kernel-default&distro=SUSE%20Manager%20Server%204.3pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_19&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_24&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP5-RT_Update_11&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-livepatch-SLE15-SP5_Update_11&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/kernel-source&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/kernel-source&distro=SUSE%20Manager%20Server%204.3pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/kernel-syms&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/kernel-syms&distro=SUSE%20Manager%20Server%204.3pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Manager%20Server%204.3
< 6.5.0-1021.21+ 103 more
- (no CPE)range: < 6.5.0-1021.21
- (no CPE)range: < 6.5.0-1017.20
- (no CPE)range: < 6.5.0-1022.23
- (no CPE)range: < 6.5.0-1024.24
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.33.37.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1.150500.6.23.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150400.15.71.1
- (no CPE)range: < 5.14.21-150400.15.71.1
- (no CPE)range: < 5.14.21-150500.33.37.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.33.37.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.33.37.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1.150500.6.23.1
- (no CPE)range: < 5.14.21-150500.55.52.1.150500.6.23.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2.150400.24.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 1-150400.1.3.1
- (no CPE)range: < 1-150400.9.3.1
- (no CPE)range: < 1-150500.11.3.1
- (no CPE)range: < 1-150500.11.3.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150400.15.71.1
- (no CPE)range: < 5.14.21-150400.15.71.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.33.37.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.15.71.1
- (no CPE)range: < 5.14.21-150400.15.71.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.33.37.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150400.24.111.1
- (no CPE)range: < 5.14.21-150500.13.38.1
- (no CPE)range: < 5.14.21-150500.55.52.1
- (no CPE)range: < 5.14.21-150400.24.111.2
- (no CPE)range: < 5.14.21-150400.24.111.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- git.kernel.org/stable/c/12c2759ab1343c124ed46ba48f27bd1ef5d2dff4mitre
- git.kernel.org/stable/c/65b201bf3e9af1b0254243a5881390eda56f72d1mitre
- git.kernel.org/stable/c/ad362fe07fecf0aba839ff2cc59a3617bd42c33fmitre
- git.kernel.org/stable/c/ba7be666740847d967822bed15500656b26bc703mitre
- git.kernel.org/stable/c/d04acadb6490aa3314f9c9e087691e55de153b88mitre
- git.kernel.org/stable/c/dba788e25f05209adf2b0175eb1691dc89fb1ba6mitre
- git.kernel.org/stable/c/dd3956a1b3dd11f46488c928cb890d6937d1ca80mitre
News mentions
0No linked articles in our index yet.