CVE-2026-98248
Last modified
CVE-2026-98248 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for __percpu_##name##_case_##sz() and __percpu_##name##_return_case_##sz() doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a 32-bit memory location, and consequently {8,16}-bit ops will erroneously read and write 32 bits of memory when the LSE instruction is used. Fix this by appending 'sfx' to 'op_lse' to LSE instruction.
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for __percpu_##name##_case_##sz() and __percpu_##name##_return_case_##sz() doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a 32-bit memory location, and consequently {8,16}-bit ops will erroneously read and write 32 bits of memory when the LSE instruction is used. Fix this by appending 'sfx' to 'op_lse' to LSE instruction. It is not necessary (and not valid) to append 'sfx' to 'op_llsc', as 'op_llsc' is a register-register operation which does not access memory (and does not take a size suffix).
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 959bf2fd03b59fc107584c21425f3dc73c49f762, < d69ab4480e49bf925f4781afcc9f284affcb96b6; >= 959bf2fd03b59fc107584c21425f3dc73c49f762, < 390742871a723b52de9b92a94c0d1c85a2531e3e; >= 959bf2fd03b59fc107584c21425f3dc73c49f762, < 843ace1d0a39e9b1cfcbfb3856a7b0fbdd9cd003; >= 959bf2fd03b59fc107584c21425f3dc73c49f762, < 8cf2093f5372952a9ebc805c418d45df7112cd14 |
| Linux | Linux | 5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98248?
How severe is CVE-2026-98248?
How do I fix CVE-2026-98248?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98242In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98243In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-98244In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98245In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98246In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98247In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98249In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98250In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98251In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-98252In the Linux kernel, the following vulnerability has been re…7
- CVE-2026-98253In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-98254In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-98248?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST