CVE-2026-46317

A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) for arm64 architectures. An issue in the reallocation of the nested_mmus array allows a process to access freed memory. This memory corruption vulnerability could enable a local attacker to escalate privileges or cause a denial of service.

This vulnerability is rated as Moderate impact because exploitation requires local access with administrative privileges to manage virtual machines, and successful abuse depends on winning a specific race condition in nested virtualization. On Red Hat Enterprise Linux running on 64-bit ARM architectures, this issue specifically affects systems running nested virtualization environments. Standard virtualization workloads or systems without nested guest hypervisors do not expose the vulnerable codepath.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.