SECUFOCUSNOW
Home›CVE index›CVE-2026-64106
Review reviewCritical

CVE-2026-64106

Linux

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that state, but vgic_its_restore_dte() accepts it and stores the out-of-range value in dev->num_eventid_bits. Reject restored DTEs with num_eventid_bits > VITS_TYPER_IDBITS before allocating the device. This mirrors the MAPD check and prevents the restored state from reaching vgic_its_restore_itt(), wh...

CVSS
9
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 9

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that state, but vgic_its_restore_dte() accepts it and stores the out-of-range value in dev->num_eventid_bits. Reject restored DTEs with num_eventid_bits > VITS_TYPER_IDBITS before allocating the device. This mirrors the MAPD check and prevents the restored state from reaching vgic_its_restore_itt(), wh...

Affected product and versions

Product
Linux
Affected versions
>= 57a9a117154c93539e33161dd318e6aeb8c04efa < 1716b7fea2ead941a0dfac06c4504a3437cdf00d, >= 57a9a117154c93539e33161dd318e6aeb8c04efa < dab9f93251b2c86a033de6098d0c73afddd55d4a, >= 57a9a117154c93539e33161dd318e6aeb8c04efa < b94538186a3eae3763b8f96dacd610920a865aa7, >= 57a9a117154c93539e33161dd318e6aeb8c04efa < 0680f511926589206f81f57f76ce131d7741a316, >= 57a9a117154c93539e33161dd318e6aeb8c04efa < 8bcd15b690a390241179516af1b6ae49ebfd9d95, >= 57a9a117154c93539e33161dd318e6aeb8c04efa < 9ce754ed8e7ab4e3999767ce1505f85c449ccb07, >= 4.12
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
CWE
Not available
CVE-2026-64106 — Linux | SECUFOCUS NOW