CVE-2026-68473
kernel: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's powerpc/uaccess component. The mask_user_address() function incorrectly checks for CONFIG_E500 instead of CONFIG_PPC_E500. This error prevents the mask_user_address_isel() function from being used on PowerPC E500 hardware, which could lead to improper handling of user addresses and potentially impact system security or stability.
Statement
This vulnerability is rated as a Moderate impact because exploitation requires local access and is confined to systems operating on PowerPC E500 processor architecture. Red Hat Enterprise Linux is not impacted as it does not ship support for this legacy embedded platform, nor does it include the flawed upstream kernel changes. As a result, standard enterprise environments face no operational exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1025 · Comparison Using Wrong Factors