Skip to main content
VulnerabilityPublished Updated

CVE-2026-64250: Linux kernel · LoongArch: Report dying CPU to RCU in stop_this_cpu()

Affects Linux kernelSource GCVE Database

0
Compare

Not known to be exploited.

Data as of 8 Nov 2026, 16:35 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 8 Nov 2026.

What to do

Affected software

ProductAffectedFixed in
Linux LinuxAffected
  • 6.1.175 – 7.0.11
5 affected builds
Fixed in–

AI-suggested

A fix has been implemented in the Linux kernel to call rcutree_report_cpu_dead() during CPU shutdown on LoongArch, which properly informs RCU of offline CPUs and prevents grace period stalls. Users should update to the fixed Linux kernel versions listed in the affectedVersions field or later. No additional mitigation is required beyond applying the official patch.

Description

A Linux kernel vulnerability affecting the LoongArch architecture involves improper reporting of a dying CPU to the Read-Copy Update (RCU) subsystem during CPU shutdown. This flaw can cause the system to hang during reboot or shutdown because RCU waits indefinitely for quiescent states from CPUs that are offline but not properly reported. The issue arises when irq_work_sync() calls synchronize_rcu() after secondary CPUs have been stopped without informing RCU, leading to stalled grace periods and system hangs. The fix involves calling rcutree_report_cpu_dead() to notify RCU of offline CPUs, allowing grace periods to complete and preventing reboot hangs.

References

Community reviews

Loading reviews…