{"id":"CVE-2026-89727","summary":"KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID\n\nvgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR straight\nto vgic_get_vcpu_irq(), and treats a failed lookup as a \"can't happen\"\ncondition with WARN_ON_ONCE().\n\nThe guest can make it happen at will, though: for any INTID outside of\nthe implemented SGI, PPI and SPI ranges the lookup returns NULL, since\nGICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID\nto GICV_DIR triggers the WARN, and panics hosts running with\npanic_on_warn.\n\nDrop the WARN and ignore failed lookups.","modified":"2026-09-13T03:47:20.449840656Z","published":"2026-09-11T19:46:38.291Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89727.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/78b95c571d021391153a5ac7981e9e4d5cc856a3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c6d9c8ac6521d3049ec90ac58bebd23ed03ac496"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89727.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89727"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"255de897e7fb918a34845167c572b5bf8e1d9d79"},{"fixed":"78b95c571d021391153a5ac7981e9e4d5cc856a3"},{"fixed":"c6d9c8ac6521d3049ec90ac58bebd23ed03ac496"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89727.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89727.json"}}],"schema_version":"1.9.0"}