Critical severity9.3NVD Advisory· Published Sep 16, 2026· Updated Oct 19, 2026
CVE-2026-89914
CVE-2026-89914
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
When the decode_range_tlbi() helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it.
As a result, special care must be taken to not overflow PA bits when this is used for S2 invalidation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 6.16.0, < 6.18.51+ 1 more
- (no CPE)range: >= 6.16.0, < 6.18.51
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.