CVE-2026-68473: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()
In the Linux kernel, the following vulnerability has been resolved:
powerpc/uaccess: correct check for CONFIGPPCE500 in maskuseraddress()
maskuseraddress() incorrectly checks for CONFIGE500 instead of CONFIGPPCE500, causing maskuseraddressisel() to not be used on E500 hardware. Fix the check to use the correct name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68473?
CVE-2026-68473 has a risk rating of 12, indicating a high severity level.
How do I fix CVE-2026-68473?
To fix CVE-2026-68473, update your Linux kernel to include the patch that correctly checks for CONFIG_PPC_E500.
Which versions of the Linux kernel are affected by CVE-2026-68473?
CVE-2026-68473 affects versions of the Linux kernel prior to the patch release on August 15, 2026.
What does CVE-2026-68473 affect in the Linux kernel?
CVE-2026-68473 affects the mask_user_address() function in the powerpc/uaccess component of the Linux kernel.
Is there a public reference for CVE-2026-68473?
Yes, the public references for CVE-2026-68473 can be found in the Linux kernel git repository.