Log in Start free

Vulnerability · Published Jul 19, 2026 · Assigned by Linux

CVE-2026-64106KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Critical 9.0

In plain English

A critical-severity improper input validation in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.0Critical
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that state, but vgic_its_restore_dte() accepts it and stores the out-of-range value in dev->num_eventid_bits. Reject restored DTEs with num_eventid_bits > VITS_TYPER_IDBITS before allocating the device. This mirrors the MAPD check and prevents the restored state from reaching vgic_its_restore_itt(), where the unchecked value can be converted into an oversized scan_its_table() range.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.176-1DEBIAN-CVE-2026-64106
Debian:13linux6.12.94-1DEBIAN-CVE-2026-64106
Debian:14linux7.0.12-1DEBIAN-CVE-2026-64106
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux6.8.0-139.139USN-8729-1
Ubuntu:24.04:LTSlinux6.8.0-139.139UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux7.0.0-28.28UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-aws6.8.0-1064.67UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-aws6.8.0-1064.67USN-8729-6
Ubuntu:26.04:LTSlinux-aws7.0.0-1009.9UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1064.67~22.04.1USN-8729-6
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1064.67~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure6.8.0-1067.75USN-8761-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1067.75UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-azure7.0.0-1010.10UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1067.75~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1067.75~22.04.1USN-8761-3
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1065.72UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1009.9UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1065.72~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gcp6.8.0-1067.75UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gcp6.8.0-1067.75USN-8729-1
Ubuntu:26.04:LTSlinux-gcp7.0.0-1008.8UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1067.75~22.04.1USN-8729-3
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1067.75~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gke6.8.0-1062.70USN-8729-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1062.70UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-gke7.0.0-1003.4UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1049.53USN-8729-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1049.53UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-28.28~24.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-ibm6.8.0-1064.65USN-8729-3
Ubuntu:24.04:LTSlinux-ibm6.8.0-1064.65UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-ibm7.0.0-1010.10UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1066.67~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-139.139.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-139.139.1USN-8729-4
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-139.139.1~22.04.1USN-8729-4
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-139.139.1~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1062.65UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1062.65USN-8729-1
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1016.16UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1062.65~22.04.1USN-8729-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1062.65~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2016.16UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1062.65.1USN-8729-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1062.65.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1009.9UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oracle6.8.0-1061.64USN-8802-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1061.64UBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-oracle7.0.0-1008.8UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1061.64~22.04.1USN-8802-1
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1061.64~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-raspi6.8.0-1064.68UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-raspi6.8.0-1064.68USN-8729-1
Ubuntu:26.04:LTSlinux-raspi7.0.0-1015.15UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-realtime7.0.0-28.28.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64106
Ubuntu:26.04:LTSlinux-riscv7.0.0-28.28.1UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-139.139~22.04.1UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-28.28.1~24.04.3UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2026-64106
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1036.37USN-8729-3
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1036.37UBUNTU-CVE-2026-64106
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-64106

Affected products (as reported)

VendorProductVersions
Linux Linux 57a9a117154c93539e33161dd318e6aeb8c04efa – before 1716b7fea2ead941a0dfac06c4504a3437cdf00d57a9a117154c93539e33161dd318e6aeb8c04efa – before dab9f93251b2c86a033de6098d0c73afddd55d4a57a9a117154c93539e33161dd318e6aeb8c04efa – before b94538186a3eae3763b8f96dacd610920a865aa757a9a117154c93539e33161dd318e6aeb8c04efa – before 0680f511926589206f81f57f76ce131d7741a31657a9a117154c93539e33161dd318e6aeb8c04efa – before 8bcd15b690a390241179516af1b6ae49ebfd9d9557a9a117154c93539e33161dd318e6aeb8c04efa – before 9ce754ed8e7ab4e3999767ce1505f85c449ccb07
Linux Linux 4.12

Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

References