Riskcovery

CVE-2026-64592

riscv: mm: Unconditionally sfence.vma for spurious fault

State
Published
Severity
Not scored
Published
Aug 6, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: mm: Unconditionally sfence.vma for spurious fault

Svvptc does not guarantee that it's safe to just return here. Since we have already cleared our bit, if, theoretically, the bounded timeframe for the accessed page to become valid still hasn't happened after sret, we could fault again and actually crash.

Hopefully, these spurious faults should be rare enough that this is an acceptable slowdown.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 503638e0babf364061bc50fca5103b00a56cc50a to before c4df24702bfc3cd2bed7746b94dc6139a3fa5428Affected
  • 503638e0babf364061bc50fca5103b00a56cc50a to before 4d730cab96e6b75e4a07c4baf37294ebc07f795eAffected
  • 503638e0babf364061bc50fca5103b00a56cc50a to before ede985ff4b569ed2454024f8bb107a6729fe08aaAffected
  • 503638e0babf364061bc50fca5103b00a56cc50a to before 1b2c6b56a9fa0dcbef461039937de22b1cbecc7dAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.