PT-2026-61192 · Linux+1 · Linux Kernel+1

CVE-2026-63875

·

Published

2026-05-22

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the arm64 architecture where the tlb flush() function failed to properly invalidate the walk cache when unsharing PMD tables. Specifically, the function only checked tlb->freed tables instead of also checking tlb->unshared tables when huge pmd unshare() was called. This resulted in stale PMD page table entries remaining in the walk cache, which could lead to incorrect page table walks. The walk cache is a hardware optimization that stores intermediate steps of the page table translation process to speed up future lookups.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-14403
CVE-2026-63875
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu