PT-2026-27710
CVE-2026-23345
·
Published
2026-01-01
·
Updated
2026-03-26
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 7.0.0-rc1
Description
The Linux kernel contains a flaw in the GCS (Global Cache System) mapping when FEAT LPA2 is enabled. Specifically, the code incorrectly sets the PTE SHARED bit on GCS mappings, leading to a kernel panic. This occurs because bits 8-9 of the PTE replace the shareability attribute with bits 50-51 of the output address when FEAT LPA2 is enabled. The issue is triggered when enabling GCS on systems with LPA2, resulting in an 'Unable to handle kernel paging request' error.
Recommendations
Update to a version newer than 7.0.0-rc1.
Found an issue in the description? Have something to add? Feel free to write us 👾