CVE-2026-80873 PUBLISHED

KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions

Assigner: Linux
Reserved: 26.08.2026 Published: 04.09.2026 Updated: 04.09.2026

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions

kvm_inject_el2_exception() writes ESR_EL2 for synchronous exceptions but not for SError. enter_exception64() does not write ESR_ELx for any exception type, so the constructed syndrome is dropped. A guest L2 hypervisor taking a nested SError observes stale ESR_EL2.

This affects both kvm_inject_nested_serror() and the EASE path in kvm_inject_nested_sea().

Write ESR_EL2 for except_type_serror, matching except_type_sync.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 77ee70a073575977b403e9add25f185d614217d8 to 09f35145f3a4aacea4d9b914ad895bf5af8fc4ae (excl.)
  • affected from 77ee70a073575977b403e9add25f185d614217d8 to 29227821e2320ff6a174c91742b4ce221fe8d563 (excl.)
  • affected from 77ee70a073575977b403e9add25f185d614217d8 to e2cb1f4578625e71f461d5c1ce70984193389cbb (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.17 is affected
  • unaffected from 0 to 6.17 (excl.)
  • unaffected from 6.18.40 to 6.18.* (incl.)
  • unaffected from 7.1.5 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References