SB20260925118 - Reliance on undefined behavior in Linux kernel powerpc kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260925118

SB20260925118 - Reliance on undefined behavior in Linux kernel powerpc kernel

Published: September 25, 2026

Security Bulletin ID SB20260925118
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Reliance on undefined behavior (CVE-ID: CVE-2026-93259)

CWE-ID: CWE-758 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to an incorrect inline assembly clobber list in the powerpc interrupt-handling functions call_do_irq() and call_do_softirq() when executing the affected stack-switching calls in CONFIG_PPC_KERNEL_PCREL mode. A local user can trigger the affected interrupt-handling paths to cause a denial of service.

Newer GCC versions can allocate values spanning the calls to r2, exposing register corruption when the called functions modify that register.


Remediation

Install update from vendor's website.

References