PT-2026-61422 · Linux · Linux

CVE-2026-64105 · Published 2026-07-19 · Updated 2026-07-19

NVD

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic: Free private irqs when init fails after allocation

Companion to commit 250f25367b58 ("KVM: arm64: Tear down vGIC on failed vCPU creation"), which added the missing kvm vgic vcpu destroy() call to the kvm share hyp() failure path in kvm arch vcpu create(). The kvm vgic vcpu init() failure path immediately above it has the same shape and still needs the same cleanup.

Call kvm vgic vcpu destroy() when kvm vgic vcpu init() fails so private IRQs allocated before a redistributor iodev registration failure are released before the failed vCPU is freed.

Related Identifiers

CVE-2026-64105

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-64105 · Security Note
• https://git.kernel.org/stable/c/7023900b4988fb6f4a59d304d878003ff562e98d · Note
• https://git.kernel.org/stable/c/e690caa54a6139d98495ac69626807623520babd · Note
• https://git.kernel.org/stable/c/f19c354dbd457759dfcf1195ab4bdba2bb568323 · Note
• https://git.kernel.org/stable/c/173fb86e5519dbe7aabed1f5fa7456152a4a2e38 · Note