CVE-2026-68473

Received Received - Intake

Incorrect CONFIG_PPC_E500 Check in Linux Kernel's mask_user_address()

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() mask_user_address() incorrectly checks for CONFIG_E500 instead of CONFIG_PPC_E500, causing mask_user_address_isel() to not be used on E500 hardware. Fix the check to use the correct name.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-68473

EUVD

EUVD-2026-59095

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where mask_user_address() incorrectly checks for CONFIG_E500 instead of CONFIG_PPC_E500. This causes mask_user_address_isel() to not be used on E500 hardware, potentially affecting memory access handling on PowerPC systems.

Detection Guidance

This vulnerability is specific to the Linux kernel's powerpc/uaccess component and requires checking the kernel configuration and source code. No direct network or system commands detect it, but you can verify the kernel configuration and source code for the incorrect CONFIG_E500 check.

Impact Analysis

The impact depends on whether you use PowerPC systems with E500 hardware. If affected, it could lead to incorrect memory access handling, potentially causing system instability or security issues in memory operations.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel issue related to incorrect configuration checks in the powerpc architecture, which does not involve data handling, privacy, or security controls that these regulations address.

Mitigation Strategies

Apply the kernel patch that corrects the CONFIG_E500 check to CONFIG_PPC_E500. Recompile and update the kernel to the fixed version. Ensure your system is running a kernel version that includes this fix.

Hi! I’m here to help you understand CVE-2026-68473. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70