PT-2026-64367 · Linux · Linux Kernel
CVE-2026-64252
·
Published
2026-07-24
·
Updated
2026-08-21
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
In 64-bit configurations, calling the initial console output handler from a kernel thread other than the initial one can cause the stack and its allocated buffer to be placed in the XKPHYS 64-bit memory segment. When this buffer is used as an argument for the firmware's
printf() entry point, the 32-bit firmware truncates the 64-bit address. This leads to an attempt to access an incorrect memory location, resulting in unpredictable behavior such as a kernel crash. This issue typically occurs when no final console driver is enabled, causing the initial console to be used late into the bootstrap process, or when the zs driver is switched to a platform device, delaying the console handover until after other kernel threads have started.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel