CVE Database›Document archive›CVE-2026-64082

CVE-2026-64082

kernel: riscv: Fix register corruption from uninitialized cregs on error

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel, specifically within the RISC-V architecture's handling of process tracing and signal restoration. When functions like compat_riscv_gpr_set() or compat_restore_sigcontext() are invoked, they may process uninitialized stack data if a preceding user data copy operation fails. This can lead to the corruption of a task's register state and potentially leak sensitive kernel stack contents, resulting in information disclosure and a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-824 · Access of Uninitialized Pointer