CVE-2026-31553
Description
A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) component. Specifically, in the ARM64 architecture, an incorrect calculation of the descriptor address in the __kvm_at_swap_desc() function could lead to memory corruption. This vulnerability may allow an attacker to cause system instability or affect the integrity of virtual machines.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Memory; Modify Memory
Incorrect pointer scaling will often result in buffer overflow conditions. Confidentiality can be compromised if the weakness is in the context of a buffer over-read or under-read.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
