PT-2026-27710
CVE-2026-23345
·
Publicado
2026-01-01
·
Atualizado
2026-03-26
Descrição por
CVSS 4.0
6.8
MédiaMétricasAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 7.0.0-rc1
Description
The Linux kernel contains a flaw in the GCS (Global Cache System) mapping when FEAT LPA2 is enabled. Specifically, the code incorrectly sets the PTE SHARED bit on GCS mappings, leading to a kernel panic. This occurs because bits 8-9 of the PTE replace the shareability attribute with bits 50-51 of the output address when FEAT LPA2 is enabled. The issue is triggered when enabling GCS on systems with LPA2, resulting in an 'Unable to handle kernel paging request' error.
Recommendations
Update to a version newer than 7.0.0-rc1.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾