Sebastian Ene

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a circular locking dependency in the KVM (Kernel-based Virtual Machine) component of the Linux kernel, specifically on arm64 architectures. The problem arises because the `pkvm create hyp vm()` function acquires the `kvm->lock` while already holding the `vcpu->mutex` lock from `kvm vcpu ioctl()`, violating the rule that `vcpu->mutex` should be taken inside `kvm->lock`. To resolve this, the hyp vm handle is protected with the `config lock`, similar to how other forms of VM-scoped data are handled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.