SB20260325106 - Memory corruption in Linux kernel arm64 mm

Description

This security bulletin contains information about 1 security vulnerability.

1) Memory corruption (CVE-ID: CVE-2026-23345)

The vulnerability allows a local user to cause a denial of service, disclose sensitive information, and potentially execute arbitrary code.

The vulnerability exists due to improper memory access in the arm64 GCS page table entry (PTE) handling when FEAT_LPA2 is enabled. A local user can trigger a kernel paging request by invoking operations that involve GCS mappings, leading to a system crash and potential memory disclosure.

The issue arises because the PTE_SHARED bits are incorrectly set in GCS mappings when FEAT_LPA2 is active, causing invalid page table entries that result in a kernel oops during memory unmapping operations.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1df3ef7e612d6ccbae5a48e1121553c47c2123d6
• https://git.kernel.org/stable/c/8a85b3131225a8c8143ba2ae29c0eef8c1f9117f
• https://git.kernel.org/stable/c/ca1684dd297bf0725c1d487cff80e615497accf6