一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月19日

CVE-2026-98637 – In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not cl

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

pkvm_vcpu_init_sve() clears KVM_ARM_VCPU_SVE in kvm->arch.vcpu_features
when it fails, but vcpu_has_sve() tests KVM_ARCH_FLAG_GUEST_HAS_SVE,
which is left set. Later vCPUs on that VM then skip the SVE setup and
register with a NULL sve_state, which the guest’s first FP access hands
to sve_load_state().

Return the error without touching vcpu_features.