CVE Database›Document archive›CVE-2026-98546

CVE-2026-98546

kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · October 18, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initialization. A local user can exploit this vulnerability by issuing a write to this register, triggering an unhandled hypervisor exception that leads to a Denial of Service (DoS) through a host system crash.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion