In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN isn't memory. This gets particularly hairy if the endpoint doesn't support cacheable memory attributes, potentially throwing an SError on writeback...
While KVM does permit cacheable memory attributes on certain PFNMAP VMAs, kvm_translate_vncr() isn't currently grabbing the VMA. So do the simpler thing for now and just reject everything that isn't memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1012-oracle-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1013-awsUpgrade linux-image-aws-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1013-gcp-64kUpgrade linux-image-7.0.0-34-realtime-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1014-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1014-ibmUpgrade linux-image-generic-64k-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-7.0.0-34-realtimeUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1007-gkeUpgrade linux-image-7.0.0-1007-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1020-raspi-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-34-generic-64kUpgrade linux-image-7.0.0-34-genericUpgrade linux-image-awsUpgrade linux-image-realtime-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1020-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1012-oracleUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1013-aws-64kUpgrade linux-image-ibmUpgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-7.0.0-1013-gcp | Sep 24, 2026 | Aug 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub