PT-2026-30039 · Linux+2 · Linux Kernel+2

Published 2026-04-03 · Updated 2026-04-20 · CVE-2026-23425

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in KVM for arm64 systems related to the initialization of ID registers for non-protected pKVM guests. The hypervisor incorrectly copies the KVM ARCH FLAG ID REGS INITIALIZED flag from the host without initializing the underlying id regs data. This causes feature detection checks at EL2 to fail, impacting logic that relies on feature detection, such as ctxt has tcrx() for TCR2 EL1 support. As a result, system registers like TCR2 EL1, PIR EL1, and POR EL1 may not be saved or restored during world switches, potentially leading to state corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-23425

OPENSUSE-SU-2026:20572-1

SUSE-SU-2026:21237-1

Affected Products

Kvm

Linux Kernel

Arm64

References · 136

• https://git.kernel.org/stable/c/858620655c1fbff05997e162fc7d83a3293d5142 · Patch
• https://git.kernel.org/stable/c/7e7c2cf0024d89443a7af52e09e47b1fe634ab17 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23425 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23425 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23425 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23425 · Vendor Advisory
• https://git.kernel.org/stable/c/bce3847f7c51b86332bf2e554c9e80ca3820f16c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23425 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21237-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23425 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2040086937701056603 · Twitter Post
• https://bugzilla.suse.com/1260550 · Note
• https://bugzilla.suse.com/1259886 · Note
• https://suse.com/security/cve/CVE-2026-23255 · Note