CVE-2026-45993

MediumCVSS 5.5/10Last modified Jun 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Add spectre boundry for syscall dispatch table

The LoongArch syscall number is directly controlled by userspace, but does not have a array_index_nospec() boundry to prevent access past the syscall function pointer tables.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= be769645a2aef577f07afdcb4de8fad20b6d57c0, < c8a8e863928424046b8fd328f02c359baa0a0c3f; >= be769645a2aef577f07afdcb4de8fad20b6d57c0, < 108f2cd13577a410c0ad6ea00708596d9d0dfc90; >= be769645a2aef577f07afdcb4de8fad20b6d57c0, < 07040904ad217545be096d4280ed33c02f6a3750; >= be769645a2aef577f07afdcb4de8fad20b6d57c0, < 85cbf7fb568af5358aae61925c4e66b8f5e1439d; >= be769645a2aef577f07afdcb4de8fad20b6d57c0, < bc84a109c2082dd0c4b38e8d923c046b41977533; >= be769645a2aef577f07afdcb4de8fad20b6d57c0, < 0c965d2784fbbd7f8e3b96d875c9cfdf7c00da3d
LinuxLinux5.19

References

Timeline

Published
May 27, 2026
Last modified
Jun 19, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-459947.1In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix OOB reads in command_file_write due to missing size checks CVE-2026-459957.8In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_struct uaf io_free_rbuf_ring() usees a struct CVE-2026-459967.8In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix use-after-free on unbind The SPI subsystem frees the conCVE-2026-459975.5In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails If dCVE-2026-459987.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential UAF after skb_unshare() failure If skb_unshare() CVE-2026-459997.1In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() Some craCVE-2026-46009.1Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameCVE-2026-460005.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets The CVE-2026-460017.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() Fix two bugs inCVE-2026-460025.5In the Linux kernel, the following vulnerability has been resolved: ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() exCVE-2026-460035.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameservCVE-2026-460047.8In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Handle probe errors properly The probe procedure of setup
CVE-2026-45993: Medium severity, CVSS 5.5 | Vulnix