{"id":"CVE-2026-80873","summary":"KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions\n\nkvm_inject_el2_exception() writes ESR_EL2 for synchronous exceptions\nbut not for SError. enter_exception64() does not write ESR_ELx for any\nexception type, so the constructed syndrome is dropped. A guest L2\nhypervisor taking a nested SError observes stale ESR_EL2.\n\nThis affects both kvm_inject_nested_serror() and the EASE path in\nkvm_inject_nested_sea().\n\nWrite ESR_EL2 for except_type_serror, matching except_type_sync.","modified":"2026-09-06T03:47:01.861389449Z","published":"2026-09-04T16:48:40.889Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80873.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/09f35145f3a4aacea4d9b914ad895bf5af8fc4ae"},{"type":"WEB","url":"https://git.kernel.org/stable/c/29227821e2320ff6a174c91742b4ce221fe8d563"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e2cb1f4578625e71f461d5c1ce70984193389cbb"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80873.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80873"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"77ee70a073575977b403e9add25f185d614217d8"},{"fixed":"09f35145f3a4aacea4d9b914ad895bf5af8fc4ae"},{"fixed":"29227821e2320ff6a174c91742b4ce221fe8d563"},{"fixed":"e2cb1f4578625e71f461d5c1ce70984193389cbb"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80873.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.17.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80873.json"}}],"schema_version":"1.9.0"}