CVE-2026-68435

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An address space mismatch exists in the LoongArch architecture during the kexec command line lookup. In the kexec load(2) path where file mode is 0, the system passes a user-space segment buffer directly to the strncmp() function using an incorrect cast. This results in the dereferencing of a user pointer within the kernel context, which is an improper operation. The issue occurs in the arch/loongarch/kernel/machine kexec.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.