CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection
In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Make Safe-RET robust against interrupt injection
An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution.
Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68480?
CVE-2026-68480 has a risk score of 43.
What systems are affected by CVE-2026-68480?
CVE-2026-68480 affects the Linux kernel on x86 architecture.
How do I fix CVE-2026-68480?
To fix CVE-2026-68480, update your Linux kernel to the latest patched version.
What is the impact of CVE-2026-68480?
CVE-2026-68480 can allow an attacker to neutralize the safe return sequence, leading to potential data leaks.
What is Safe-RET in relation to CVE-2026-68480?
Safe-RET is a mitigation mechanism in the Linux kernel designed to protect against certain return-oriented programming attacks.