The Linux kernel’s virtual generic interrupt controller (VGIC) on ARM64 KVM environments can double‑deactivate a physical interrupt that has already been cleared by hardware. Under normal conditions the extra deactivation is harmless, but on AmpereOne processors the resulting errata causes the CPU to lose the pending interrupt state and prevents delivery of future interrupts. This defect can halt interrupt‑driven operations and effectively deny service to processes relying on those interrupts.

Affected systems include Linux kernel installations that run KVM on ARM64, with the AmpereOne platform identified as the specific hardware where the errata manifests. No explicit kernel version range is specified in the advisory, but the commit references show that the patch has been incorporated into recent kernel releases. Users should verify whether their current kernel contains the commit that removes the double‑deactivation logic.

No CVSS score or EPSS data is provided; the vulnerability is not listed in CISA’s KEV catalog. The description does not state an explicit attack vector or privilege requirement. It is inferred that a malicious or misbehaving nested virtual machine, or an attacker with control over the hypervisor, would need to trigger the double deactivation inside a nested context to exploit the errata. While the risk is theoretical in the absence of a known public exploit, environments that enable nested virtualization on AmpereOne hardware should consider this a significant potential denial‑of‑service vector.