CVE-2026-98877: Linux kernel · irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e79934064be85fc9a3a6434da857307d8b78e33d : patch Linux kernel soon.
Data as of 26 Oct 2026, 17:30 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in e79934064be85fc9a3a6434da857307d8b78e33d, e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5, c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40 +4
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel commits identified by the fixedVersions hashes. Users should update their Linux kernel to a version including these commits to resolve the issue. Avoid enabling kvm-arm.vgic_v4_enable=1 on systems without an MSI controller device tree node and GICv4 until patched.
Description
A vulnerability in the Linux kernel's irqchip/gic-v4 subsystem causes a kernel panic when the virtual GICv4 is enabled on a system without an MSI controller device tree node and GICv4 support. This occurs due to a NULL pointer dereference when the kernel attempts to access a non-existent gic_domain. The issue is fixed by disabling vLPI support at initialization if the host has no ITS, preventing the panic.
References
- git.kernel.org/stable/c/3e4cae9f1472ba3c9fe87edee24074618b51f537 (opens in a new tab)
- git.kernel.org/stable/c/a2508b8855acc96abe69be73b41b672f1ef12516 (opens in a new tab)
- git.kernel.org/stable/c/e79934064be85fc9a3a6434da857307d8b78e33d (opens in a new tab)
- git.kernel.org/stable/c/4761493dd663443f7353c184e6fa16e1cb3ac5a1 (opens in a new tab)
- git.kernel.org/stable/c/ab233119a19716b8f33e73ea7e092e0eb353cfbf (opens in a new tab)
- git.kernel.org/stable/c/c8a911b3b07baa0aeb3dbc4e16a4670bd21bed40 (opens in a new tab)
- git.kernel.org/stable/c/e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5 (opens in a new tab)