CVE-2026-80560

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the restore sigcontext() function where the supervision register (SR) is copied from the signal frame without properly clearing privileged bits before returning to user space. An unprivileged task can use a crafted signal frame to clear the SPR SR DME bit, which disables the data Memory Management Unit (MMU). When the data MMU is disabled, the CPU performs no translation or protection on data accesses, allowing the task to read and write arbitrary physical memory, leading to local privilege escalation. Other privileged bits, including SPR SR IME, SPR SR SUMRA, SPR SR LEE, SPR SR EPH, and cache-enable bits, are similarly exposed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.