CVE-2026-98248
Received Received - Intake

Memory Corruption in Linux Kernel LSE Operations

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for __percpu_##name##_case_##sz() and __percpu_##name##_return_case_##sz() doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a 32-bit memory location, and consequently {8,16}-bit ops will erroneously read and write 32 bits of memory when the LSE instruction is used. Fix this by appending 'sfx' to 'op_lse' to LSE instruction. It is not necessary (and not valid) to append 'sfx' to 'op_llsc', as 'op_llsc' is a register-register operation which does not access memory (and does not take a size suffix).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-98248
EUVD
EUVD-2026-93176

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 959bf2fd03b59fc107584c21425f3dc73c49f762
Linux Linux 959bf2fd03b59fc107584c21425f3dc73c49f762
Linux Linux 959bf2fd03b59fc107584c21425f3dc73c49f762
Linux Linux 959bf2fd03b59fc107584c21425f3dc73c49f762
Linux Linux 5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's arm64 percpu operations. It involves incorrect assembly code for 8-bit and 16-bit types in LSE (Large System Extension) instructions. The code fails to use the 'sfx' macro, causing 32-bit memory access instead of the intended 8 or 16 bits. This leads to erroneous reads and writes of 32 bits of memory.

Detection Guidance

This vulnerability affects the Linux kernel's percpu operations for 8 and 16-bit types on arm64 systems. Detection requires checking kernel version and examining assembly code for incorrect LSE instruction usage. No direct network detection commands exist; system-level checks are needed.

Impact Analysis

This vulnerability could cause memory corruption or data leaks in systems running affected Linux kernels. It may lead to crashes, unexpected behavior, or privilege escalation if exploited. Systems using arm64 architecture with percpu operations are at risk.

Mitigation Strategies

Apply the kernel patch that fixes the LSE instruction suffix issue. Update to a patched kernel version. Reboot the system after applying the update. Monitor for unusual memory access patterns in percpu operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98248. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart