In the Linux kernel, the following vulnerability has been resolved:
riscv: Fix register corruption from uninitialized cregs on error
compat_riscv_gpr_set() calls cregs_to_regs() unconditionally, even when user_regset_copyin() fails. Since cregs is an uninitialized stack variable, a copyin failure causes uninitialized stack data to be written into the target task's pt_regs, corrupting its register state and potentially leaking kernel stack contents.
compat_restore_sigcontext() has the same issue: it calls cregs_to_regs() even when __copy_from_user() fails, leading to the same corruption of the signal-returning task's register state on error.
Only call cregs_to_regs() when the user copy succeeds.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 21, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-aws-7.0Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-awsUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-azure-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1015-raspi-realtime | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub