PT-2026-64367 · Linux · Linux Kernel

CVE-2026-64252

·

Published

2026-07-24

·

Updated

2026-08-21

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description In 64-bit configurations, calling the initial console output handler from a kernel thread other than the initial one can cause the stack and its allocated buffer to be placed in the XKPHYS 64-bit memory segment. When this buffer is used as an argument for the firmware's printf() entry point, the 32-bit firmware truncates the 64-bit address. This leads to an attempt to access an incorrect memory location, resulting in unpredictable behavior such as a kernel crash. This issue typically occurs when no final console driver is enabled, causing the initial console to be used late into the bootstrap process, or when the zs driver is switched to a platform device, delaying the console handover until after other kernel threads have started.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-64252
OPENSUSE-SU-2026:11476-1

Affected Products

Linux Kernel