Threats Tagged 'cve-2026-64082'

A vulnerability in the Linux kernel affecting the RISC-V architecture was resolved, where uninitialized stack variables could cause register state corruption and potential kernel stack data leakage during error handling in certain functions. This flaw could corrupt the register state of tasks and signal-returning tasks when user memory copy operations fail. The issue has been fixed by ensuring these functions only proceed when user copy operations succeed. The vulnerability has a CVSS score of 7.8 and affects multiple Linux kernel versions prior to 7.0.0-28.28 and various other specific versions. A patch is available and should be applied to mitigate the risk.

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compat_riscv_gpr_set() calls cregs_to_regs() unconditionally, even when user_regset_copyin() fails. Since cregs is an uninitialized stack variable, a copyin failure causes uninitialized stack data to be written into the target task's pt_regs, corrupting its register state and potentially leaking kernel stack contents. compat_restore_sigcontext() has the same issue: it calls cregs_to_regs() even when __copy_from_user() fails, leading to the same corruption of the signal-returning task's register state on error. Only call cregs_to_regs() when the user copy succeeds.