UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-98637
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure pkvm_vcpu_init_sve() clears KVM_ARM_VCPU_SVE in kvm->arch.vcpu_features when it fails, but vcpu_has_sve() tests KVM_ARCH_FLAG_GUEST_HAS_SVE, which is left set. Later vCPUs on that VM then skip the SVE setup and register with a NULL sve_state, which the guest's first FP access hands to sve_load_state(). Return the error without touching vcpu_features.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00166
- Cve id
- CVE-2026-98637
- First seen by Signal
- 2026-10-18T18:05:58+00:00
- Retrieved at
- 2026-10-21T01:24:51+00:00
- Published at
- 2026-10-18T16:17:16.820
- Last modified
- 2026-10-19T10:19:27.947
- Epss percentile
- 0.05469
Explore deeper with Ninja Signal's threat intelligence graph