CVE-2026-89914

Summary

This vulnerability in the Linux kernel's KVM arm64 implementation allows attackers to perform range-based TLBI invalidation without proper sign extension, potentially leading to privilege escalation.

Exploitability

Exploitation requires specific kernel configuration and access to the affected system. The vulnerability is difficult to exploit without detailed knowledge of the system and the exact conditions under which it can be triggered.

Blast radius

If exploited, the impact could be severe, potentially allowing an attacker to gain full control over the system or virtual machine.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 5.19.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.