CVE-2026-64592: riscv: mm: Unconditionally sfence.vma for spurious fault
In the Linux kernel, the following vulnerability has been resolved:
riscv: mm: Unconditionally sfence.vma for spurious fault
Svvptc does not guarantee that it's safe to just return here. Since we have already cleared our bit, if, theoretically, the bounded timeframe for the accessed page to become valid still hasn't happened after sret, we could fault again and actually crash.
Hopefully, these spurious faults should be rare enough that this is an acceptable slowdown.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64592?
The severity of CVE-2026-64592 is rated at risk 23.
How do I fix CVE-2026-64592?
To fix CVE-2026-64592, update your Linux kernel to the latest version where the vulnerability has been resolved.
What systems are affected by CVE-2026-64592?
CVE-2026-64592 affects systems running the RISC-V architecture in the Linux kernel.
What types of attacks can CVE-2026-64592 potentially enable?
CVE-2026-64592 could potentially enable attacks that exploit spurious faults within the memory management of systems using RISC-V.
Has CVE-2026-64592 been disclosed publicly?
Yes, CVE-2026-64592 was published on August 6, 2026, and is available in public vulnerability databases.