Live › vulnerability › CVE-2026-98877
Go to dashboardWhen the kernel is started with kvm-arm.vgic_v4_enable=1 on an ARM system that has GICv4 but no MSI controller (ITS) device tree node, the GIC irqchip code dereferences a NULL gic_domain and panics. The fix stops advertising vLPI support when no ITS has been probed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Linux on ARM64 with GICv4 and no ITS node in the device tree, where kvm-arm.vgic_v4_enable=1 is set. Ordinary systems with default KVM settings are unlikely to be affected, and the sources describe a crash rather than code execution or data exposure.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
When accidentally setting “kvm-arm.vgic_v4_enable=1” on a system that has no MSI controller device tree node and GICv4, it results a panic as “gic_domain” is NULL and the kernel attempts to access it.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028
Mem abort info:
ESR = 0x0000000096000006
CPU: 1 UID: 0 PID: 295 Comm: lkvm-static Not tainted 7.1.0-rc4-ge3f15ad3970e #5 PREEMPT
Hardware name: linux,dummy-virt (DT)
pstate: 81402005 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __irq_domain_instantiate+0x1d4/0x578
lr : __irq_domain_instantiate+0x1cc/0x578
Set vLPI support to false at init time if the host has no ITS, so it propagates properly to kvm_vgic_global_state.has_gicv4.
This page as .md · .json · in your agent: get_signal("CVE-2026-98877")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.