vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64592

riscv: mm: Unconditionally sfence.vma for spurious fault

N/A
Published: August 6, 2026 at 07:13 AM UTC
Updated: August 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious fault Svvptc does not guarantee that it's safe to just return here. Since we have already cleared our bit, if, theoretically, the bounded timeframe for the accessed page to become valid still hasn't happened after sret, we could fault again and actually crash. Hopefully, these spurious faults should be rare enough that this is an acceptable slowdown.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.12 ≤ v < 6.12.966.12 ≤ v < 6.18.396.12 ≤ v < 7.1.46.12 ≤ v < 7.2503638e0babf364061bc50fca5103b00a56cc50a6.12
Vendor states this is fixed in 1b2c6b56a9fa0dcbef461039937de22b1cbecc7d (fixed)
Vendor states this is fixed in 4d730cab96e6b75e4a07c4baf37294ebc07f795e (fixed)
Vendor states this is fixed in c4df24702bfc3cd2bed7746b94dc6139a3fa5428 (fixed)
Vendor states this is fixed in ede985ff4b569ed2454024f8bb107a6729fe08aa (fixed)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.12.96 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

Source: cverecord
https://git.kernel.org/stable/c/c4df24702bfc3cd2bed7746b94dc6139a3fa5428
Source: cverecord
https://git.kernel.org/stable/c/4d730cab96e6b75e4a07c4baf37294ebc07f795e
Source: cverecord
https://git.kernel.org/stable/c/ede985ff4b569ed2454024f8bb107a6729fe08aa
Source: cverecord
https://git.kernel.org/stable/c/1b2c6b56a9fa0dcbef461039937de22b1cbecc7d

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card