CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()<br /> <br /> kvm_hyp_handle_mops() resets the single-step state machine as part of<br /> rewinding state for a MOPS exception by modifying vcpu_cpsr() and<br /> writing the result directly into hardware.<br /> <br /> In the case of nested virtualization, vcpu_cpsr() is a synthetic value<br /> such that the rest of KVM can deal with vEL2 cleanly. That means the<br /> value requires translation before being written into hardware, which is<br /> unfortunately missing from the MOPS handler.<br /> <br /> Fix it by directly modifying SPSR_EL2 and avoiding the synthetic state<br /> altogether, which will be resynchronized on the next &amp;#39;full&amp;#39; exit back<br /> to KVM.