CVE-2026-68474

A flaw was found in the Linux kernel, specifically within the powerpc/spufs component responsible for managing memory access. This vulnerability allows for an out-of-bounds memory access due to incorrect boundary checks in the spufs_mem_mmap_access() function. An attacker could exploit this to corrupt memory, potentially leading to system instability (denial of service) or unauthorized privilege escalation.

Red Hat has evaluated this issue as having a Moderate security impact because exploitation requires local user privileges and is confined to specialized Cell processor architectures. The Synergistic Processing Unit file system (spufs) is not enabled or built into Red Hat Enterprise Linux kernels, which target enterprise 64-bit Power server platforms. Consequently, standard Red Hat kernel deployments do not include the vulnerable code and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.