CVE-2026-98248

arm64: percpu: Fix LSE operations on {8,16}-bit types

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: percpu: Fix LSE operations on {8,16}-bit types

The assembly for __percpu_##name##_case_##sz() and __percpu_##name##_return_case_##sz() doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a 32-bit memory location, and consequently {8,16}-bit ops will erroneously read and write 32 bits of memory when the LSE instruction is used.

Fix this by appending 'sfx' to 'op_lse' to LSE instruction. It is not necessary (and not valid) to append 'sfx' to 'op_llsc', as 'op_llsc' is a register-register operation which does not access memory (and does not take a size suffix).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 959bf2fd03b59fc107584c21425f3dc73c49f762 to before d69ab4480e49bf925f4781afcc9f284affcb96b6Affected
  • 959bf2fd03b59fc107584c21425f3dc73c49f762 to before 390742871a723b52de9b92a94c0d1c85a2531e3eAffected
  • 959bf2fd03b59fc107584c21425f3dc73c49f762 to before 843ace1d0a39e9b1cfcbfb3856a7b0fbdd9cd003Affected
  • 959bf2fd03b59fc107584c21425f3dc73c49f762 to before 8cf2093f5372952a9ebc805c418d45df7112cd14Affected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.