In the Linux kernel, the following vulnerability has been resolved:
riscv: Sanitize syscall table indexing under speculation
The syscall number is a user-controlled value used to index into the syscall table. Use array_index_nospec() to clamp this value after the bounds check to prevent speculative out-of-bounds access and subsequent data leakage via cache side channels.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-generic-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-gke-6.8Upgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-xilinx-zynqmp | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub