Answer in brief
CVE-2024-26598 records a Unknown severity vulnerability in KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-26598 records a Unknown severity vulnerability in KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <d04acadb6490aa3314f9c9e087691e55de153b88 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <ba7be666740847d967822bed15500656b26bc703 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <12c2759ab1343c124ed46ba48f27bd1ef5d2dff4 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <dba788e25f05209adf2b0175eb1691dc89fb1ba6 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <65b201bf3e9af1b0254243a5881390eda56f72d1 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <dd3956a1b3dd11f46488c928cb890d6937d1ca80 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <ad362fe07fecf0aba839ff2cc59a3617bd42c33f | d04acadb6490aa3314f9c9e087691e55de153b88, ba7be666740847d967822bed15500656b26bc703, 12c2759ab1343c124ed46ba48f27bd1ef5d2dff4, dba788e25f05209adf2b0175eb1691dc89fb1ba6, 65b201bf3e9af1b0254243a5881390eda56f72d1, dd3956a1b3dd11f46488c928cb890d6937d1ca80, ad362fe07fecf0aba839ff2cc59a3617bd42c33f |
| Linux/Linuxgeneric | 3.11 | Not reported |
| linux/linux_kernelgeneric | >=1da177e4c3f4 <d04acadb6490 || >=1da177e4c3f4 <ba7be6667408 || >=1da177e4c3f4 <12c2759ab134 || >=1da177e4c3f4 <dba788e25f05 || >=1da177e4c3f4 <65b201bf3e9a || >=1da177e4c3f4 <dd3956a1b3dd || >=1da177e4c3f4 <ad362fe07fec | d04acadb6490, ba7be6667408, 12c2759ab134, dba788e25f05, 65b201bf3e9a, dd3956a1b3dd, ad362fe07fec |
Published upstream
Feb 23, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes. Have vgic_its_check_cache() raise the refcount on the returned vgic_irq and add the corresponding decrement after queueing the interrupt.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <d04acadb6490aa3314f9c9e087691e55de153b88 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <ba7be666740847d967822bed15500656b26bc703 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <12c2759ab1343c124ed46ba48f27bd1ef5d2dff4 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <dba788e25f05209adf2b0175eb1691dc89fb1ba6 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <65b201bf3e9af1b0254243a5881390eda56f72d1 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <dd3956a1b3dd11f46488c928cb890d6937d1ca80 || >=6211753fdfd05af9e08f54c8d0ba3ee516034878 <ad362fe07fecf0aba839ff2cc59a3617bd42c33f | d04acadb6490aa3314f9c9e087691e55de153b88, ba7be666740847d967822bed15500656b26bc703, 12c2759ab1343c124ed46ba48f27bd1ef5d2dff4, dba788e25f05209adf2b0175eb1691dc89fb1ba6, 65b201bf3e9af1b0254243a5881390eda56f72d1, dd3956a1b3dd11f46488c928cb890d6937d1ca80, ad362fe07fecf0aba839ff2cc59a3617bd42c33f |
| Linux/Linuxgeneric | 3.11 | Not reported |
| linux/linux_kernelgeneric | >=1da177e4c3f4 <d04acadb6490 || >=1da177e4c3f4 <ba7be6667408 || >=1da177e4c3f4 <12c2759ab134 || >=1da177e4c3f4 <dba788e25f05 || >=1da177e4c3f4 <65b201bf3e9a || >=1da177e4c3f4 <dd3956a1b3dd || >=1da177e4c3f4 <ad362fe07fec | d04acadb6490, ba7be6667408, 12c2759ab134, dba788e25f05, 65b201bf3e9a, dd3956a1b3dd, ad362fe07fec |
Published upstream
Feb 23, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes. Have vgic_its_check_cache() raise the refcount on the returned vgic_irq and add the corresponding decrement after queueing the interrupt.
Quoted source text, attributed separately from HOL analysis.