CVE-2026-64082

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where uninitialized stack data is written into a target task's register state during error conditions. In the compat riscv gpr set() function, cregs to regs() is called regardless of whether user regset copyin() fails. Similarly, compat restore sigcontext() calls cregs to regs() even when copy from user() fails. This behavior can lead to register corruption and the potential leakage of kernel stack contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.