Loading vulnerability…
CVE-2026-46316 is a race-condition-driven use-after-free vulnerability in the Linux kernel’s KVM arm64 virtual GIC Interrupt Translation Service implementation, specifically in the vGIC-ITS translation cache invalidation path. The flaw is in vgic_its_invalidate_cache(), which iterates the per-ITS translation cache and drops references with vgic_put_irq(). In the vulnerable logic, the code releases the iterated pointer rather than the entry actually returned by the atomic xa_erase() operation. Because the invalidation routine can run concurrently from multiple non-mutually-exclusive contexts, including ITS command handling, the GITS_CTLR write path, and the path that clears EnableLPIs in a redistributor, multiple threads can observe and erase the same cache entry and each drop the same cache-held reference. This causes the reference count for a cached interrupt object to be decremented more than once, allowing the object to be freed while it is still referenced by an interrupt translation entry. The resulting dangling reference creates a use-after-free condition in in-kernel KVM on arm64. Public reporting and proof-of-concept material describe this issue as “ITScape” and show that the memory corruption can be developed beyond a crash into guest-to-host escape and host-kernel code execution.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
Repository contains a real C-based proof-of-concept exploit for CVE-2026-46316, a guest-to-host escape in Linux KVM/arm64 caused by a race in vGIC-ITS cache invalidation. Structure is small and focused: README.md explains the vulnerability, affected versions, and usage; assets/write-up.md provides deep technical root-cause and exploit-chain analysis; build.sh compiles the PoC against an unmodified Linux kernel selftests tree; qemu.sh launches an arm64 QEMU TCG environment with GICv3/ITS enabled for safe testing; poc.c is the main exploit. The exploit is not a scanner or detector. It creates a KVM guest via /dev/kvm, populates and races the ITS translation cache from guest-side actions, triggers a double-put/use-after-free in in-kernel KVM, and pivots that into host kernel code execution. The PoC is tuned for a specific target build (Linux v7.1-rc6 with bundled config) and uses hardcoded addresses/offsets, so it is operational but not broadly weaponized. Its demonstrated payload is simple: execute a host-side command path (/bin/touch) from kernel context to create /ITScape as a root-owned marker file. Attack surface is primarily hypervisor/local: an attacker controlling a guest on a vulnerable arm64 KVM host, with guest root privileges, can exploit the host through emulated GIC/ITS MMIO without relying on QEMU userspace emulation. The repository emphasizes that the bug is in in-kernel KVM, independent of QEMU, though QEMU TCG is used here only as a safe lab harness. Notable fingerprintable artifacts include /dev/kvm, /bin/touch, /ITScape, the Linux selftests build path, and the referenced vulnerable/fixed kernel commits.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
50 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A separate guest-to-host KVM escape issue on ARM64 involving a race condition in the virtual interrupt controller.
A separate KVM/arm64 guest-to-host escape vulnerability mentioned for comparison/background.
A previously reported KVM/arm64 escape vulnerability mentioned as closely related background to Januscape.
A Linux kernel KVM/arm64 guest-to-host escape vulnerability in vgic-its translation cache invalidation logic that can allow a guest VM to escape to the host and execute commands with kernel/root privileges.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.