CVE-2026-31553

kernel: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) component. Specifically, in the ARM64 architecture, an incorrect calculation of the descriptor address in the __kvm_at_swap_desc() function could lead to memory corruption. This vulnerability may allow an attacker to cause system instability or affect the integrity of virtual machines.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-468 · Incorrect Pointer Scaling