CVE-2026-89912

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite->collection but leaves the ITE on the device's ITT list, and vgic_its_save_ite() dereferences it unconditionally. A guest that issues MAPD, MAPTI and then MAPC(V=0) therefore oopses the host when the VMM issues KVM_DEV_ARM_ITS_SAVE_TABLES to migrate it. That sequence is UNPREDICTABLE per the architecture, but KVM already handles the resulting state in the translate, MOVI and DISCARD paths. Save a zeroed entry, which vgic_its_restore_ite() reads back as invalid. Skipping the ITE instead would leave the ITT slot holding whatever is in guest memory, and restore rejects an entry naming a collection the restored collection table does not have.

• https://git.kernel.org/stable/c/36df368861d2664291298feeb37dfef43fcae670
• https://git.kernel.org/stable/c/3d4c26b16a04a084fe0bde08ccdd8086570f8bbe
• https://git.kernel.org/stable/c/c6c156d931c33b92362383cf76f6d6e1291dcbfe

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-89907In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-89908In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-89909In the Linux kernel, the following vulnerability has been re…
• CVE-2026-8991The Drag and Drop Multiple File Upload for Contact Form 7 pl…4.4
• CVE-2026-89910In the Linux kernel, the following vulnerability has been re…7.3
• CVE-2026-89911In the Linux kernel, the following vulnerability has been re…7.9
• CVE-2026-89913In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-89914In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-89915In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-89916In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-89917In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89918In the Linux kernel, the following vulnerability has been re…9.3