Denial of Service Vulnerability in Linux Kernel's GICv5 Driver

CVE-2026-98878

What is CVE-2026-98878?

A vulnerability exists in the GICv5 driver of the Linux kernel that can lead to Denial of Service conditions. When interrupts are programmed to have the same priority, they may not be signaled until a priority drop has occurred. This design flaw in the handling of interrupts allows a long-running process to block incoming interrupts, causing disruptions in system performance or application functionality, particularly when physical interrupts are injected into a guest virtual machine. The update modifies the timing of the priority drop to ensure better interrupt management, enhancing system reliability.

References