In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()… (CVE-2026-68473)
A vulnerability in the Linux kernel's powerpc/uaccess code was resolved by correcting a configuration check in the mask_user_address() function. The function incorrectly checked for CONFIG_E500 instead of the correct CONFIG_PPC_E500, which caused mask_user_address_isel() to not be used on E500 hardware. This issue has been fixed by updating the check to use the correct configuration name.
AI Analysis
Technical Summary
The Linux kernel contained a vulnerability in the powerpc/uaccess subsystem where the mask_user_address() function incorrectly checked for the configuration flag CONFIG_E500 instead of CONFIG_PPC_E500. This misconfiguration caused the mask_user_address_isel() function not to be invoked on E500 hardware, potentially leading to improper handling of user address masking. The vulnerability has been resolved by correcting the configuration check to use CONFIG_PPC_E500 as intended.
Potential Impact
The incorrect configuration check could lead to improper address masking on E500 hardware, which may affect memory access controls in the kernel. However, specific impact details such as privilege escalation or denial of service are not provided in the available information.
Mitigation Recommendations
A fix has been applied to the Linux kernel source code to correct the configuration check in mask_user_address(). Users should update to the fixed kernel version containing this patch. Since this is a source code fix, applying the official kernel update is the recommended remediation.
In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()… (CVE-2026-68473)
Description
A vulnerability in the Linux kernel's powerpc/uaccess code was resolved by correcting a configuration check in the mask_user_address() function. The function incorrectly checked for CONFIG_E500 instead of the correct CONFIG_PPC_E500, which caused mask_user_address_isel() to not be used on E500 hardware. This issue has been fixed by updating the check to use the correct configuration name.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel contained a vulnerability in the powerpc/uaccess subsystem where the mask_user_address() function incorrectly checked for the configuration flag CONFIG_E500 instead of CONFIG_PPC_E500. This misconfiguration caused the mask_user_address_isel() function not to be invoked on E500 hardware, potentially leading to improper handling of user address masking. The vulnerability has been resolved by correcting the configuration check to use CONFIG_PPC_E500 as intended.
Potential Impact
The incorrect configuration check could lead to improper address masking on E500 hardware, which may affect memory access controls in the kernel. However, specific impact details such as privilege escalation or denial of service are not provided in the available information.
Mitigation Recommendations
A fix has been applied to the Linux kernel source code to correct the configuration check in mask_user_address(). Users should update to the fixed kernel version containing this patch. Since this is a source code fix, applying the official kernel update is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h544-cjrp-f5fc
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68473"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b79bf8831d539502806
Added to database: 08/15/2026, 15:53:29 UTC
Last enriched: 08/15/2026, 17:11:15 UTC
Last updated: 08/15/2026, 17:41:16 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.