PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-23102

CVE-2026-23102

kernel: Linux kernel: Denial of Service due to incorrect SVE context restoration

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · February 4, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's arm64/fpsimd component. This vulnerability involves incorrect handling during the restoration of the Scalable Vector Extension (SVE) signal context. A local user could exploit this by manipulating the SVE context, potentially leading to out-of-bounds memory reads (though this memory is not visible to the attacker) or causing a denial of service by terminating the affected task.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-130 · Improper Handling of Length Parameter Inconsistency