Apply the latest Linux kernel patches that address the KVM ARM64 memory handling code. Disable nested virtualization if not required. Monitor vendor advisories and kernel security mailing lists for follow-up updates. Ensure systems are running kernel versions containing the fix for CVE-2026-89775.
Quick answers
What is CVE-2026-89775?
Apply the latest Linux kernel patches that address the KVM ARM64 memory handling code. Disable nested virtualization if not required. Monitor vendor advisories and kernel security mailing lists for follow-up updates. Ensure systems are running kernel versions containing the fix for CVE-2026-89775.
How severe is CVE-2026-89775?
high, CVSS 7.5
Is CVE-2026-89775 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-89775 be mitigated?
Apply the latest Linux kernel patches that address the KVM ARM64 memory handling code. Disable nested virtualization if not required. Monitor vendor advisories and kernel security mailing lists for follow-up updates. Ensure systems are running kernel versions containing the fix for CVE-2026-89775.
CVSS
7.5
Vendor
Linux Foundation / Kernel maintainers
Published
Sep 30, 2026 · 08:05
Patch
Unknown / not confirmed
Affected products
Linux kernel (ARM64 KVM subsystem)
Mitigation
Apply the latest Linux kernel patches that address the KVM ARM64 memory handling code. Disable nested virtualization if not required. Monitor vendor advisories and kernel security mailing lists for follow-up updates. Ensure systems are running kernel versions containing the fix for CVE-2026-89775.
A use-after-free vulnerability in the Linux kernel's KVM subsystem for ARM64 processors has been disclosed as CVE-2026-89775. The flaw affects hosts with nested virtualization enabled, where a guest virtual machine can read and write to previously freed host kernel memory. The discovering researcher indicates this may facilitate guest-to-host code execution, though kernel maintainers have not independently verified exploitation claims at time of reporting.
