PT-2026-47362 · Linux+2 · Linux Kernel+2

CVE-2026-46290

·

Published

2026-05-04

·

Updated

2026-09-07

CVSS v2.0

7.7

High

VectorAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the x86 EFI implementation where the graceful page fault handler efi crash gracefully on page fault() incorrectly identifies the system state. Due to changes in FPU softirq handling, kernel fpu begin() utilizes fpregs lock(), which invokes local bh disable(). This action sets the SOFTIRQ OFFSET in preempt count, causing the in interrupt() function to return true even within a normal task context. Consequently, the handler bails out during EFI firmware page faults, leading to a system panic and a hard freeze instead of a graceful recovery. This occurs specifically on systems with buggy firmware that triggers page faults during EFI runtime calls, such as accessing unmapped memory in GetTime().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13877
CVE-2026-46290
OPENSUSE-SU-2026:11014-1
USN-8491-1
USN-8566-1
USN-8568-1
USN-8569-1
USN-8570-1
USN-8570-2
USN-8593-1
USN-8603-1
USN-8604-1
USN-8605-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8669-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu