CVE-2026-98396
kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 14, 2026
Updated · October 15, 2026
Description
A flaw was found in the Linux kernel. On PowerPC systems, Kernel Userspace Access Prevention (KUAP) controls are restored prematurely before platform-specific exit routines complete during system call and interrupt handling. A local user can trigger these execution paths to cause the kernel to run exit routines without active memory access restrictions, potentially weakening system security mitigations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-270 · Privilege Context Switching Error