CVE-2026-68435

A flaw was found in the Linux kernel, specifically within the LoongArch architecture's kexec command line lookup functionality. A local attacker could exploit this by using the kexec_load system call, which incorrectly passes a user-space segment buffer to a kernel function without proper validation. This improper handling leads to dereferencing a user pointer in kernel context, potentially resulting in a denial of service or information disclosure.

This issue affects LoongArch systems using kexec_load(). The kernel incorrectly dereferences user-space segment buffers when searching for the kexec command line marker. Systems not using LoongArch are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.