In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq Referencing the last interrupt inserted in an LR is rather fragile, as this interrupt can vanish if a concurrently unmapped LPI. Solve this by bumping up the refcount on the interrupt when populating last_lr_irq, and drop it at vgic_prune_ap_list() time, when LPIs are being reclaimed.
https://git.kernel.org/stable/c/8b25393d16a5ca8df907bd7ee1ff2e9d85678b3c
https://git.kernel.org/stable/c/19bc5d79ece613f242b5ec03921a3b465321bfed