CVE-2026-64082riscv: Fix register corruption from uninitialized cregs on error
- 7.8HighCVSS base score
- 0.13%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compat_riscv_gpr_set() calls cregs_to_regs() unconditionally, even when user_regset_copyin() fails. Since cregs is an uninitialized stack variable, a copyin failure causes uninitialized stack data to be written into the target task's pt_regs, corrupting its register state and potentially leaking kernel stack contents. compat_restore_sigcontext() has the same issue: it calls cregs_to_regs() even when __copy_from_user() fails, leading to the same corruption of the signal-returning task's register state on error. Only call cregs_to_regs() when the user copy succeeds.
Timeline
ID reserved
By Linux
Published
- 45 days later
· 45 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Analyzed | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.13% · top 97% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 7383ee05314be58f8f9f018ee0ac53bef3808aea – < f2d88b0d7aebfa4643fc58bbae57210c6daff9c6
- affected 7383ee05314be58f8f9f018ee0ac53bef3808aea – < 66dedb6028c3df6c6a3372dd935b823917e150d5
- affected 7383ee05314be58f8f9f018ee0ac53bef3808aea – < 2a7d1daf2674fe7d5b1cc99a4e3b5f0f72d5958f
- affected 7383ee05314be58f8f9f018ee0ac53bef3808aea – < 0599aa23734c48de9bce36d043a9ec90c23945a1
- affected 7383ee05314be58f8f9f018ee0ac53bef3808aea – < 9e020156833f1ad0d425a1e3d85b65639f1c1c50
- affected 7383ee05314be58f8f9f018ee0ac53bef3808aea – < 6ebcbb53fc9bc30843054ed99fd60b8e542628f4
- affected 5.19
- unaffected < 5.19
- unaffected 6.1.187 – ≤ 6.1.*
- unaffected 6.6.156 – ≤ 6.6.*
- unaffected 6.12.108 – ≤ 6.12.*
- unaffected 6.18.49 – ≤ 6.18.*
- unaffected 7.0.11 – ≤ 7.0.*
- unaffected 7.1 – ≤ *
References
References6
- https://git.kernel.org/stable/c/f2d88b0d7aebfa4643fc58bbae57210c6daff9c6 (opens in a new tab)
- https://git.kernel.org/stable/c/66dedb6028c3df6c6a3372dd935b823917e150d5 (opens in a new tab)
- https://git.kernel.org/stable/c/2a7d1daf2674fe7d5b1cc99a4e3b5f0f72d5958f (opens in a new tab)
- https://git.kernel.org/stable/c/0599aa23734c48de9bce36d043a9ec90c23945a1 (opens in a new tab)
- https://git.kernel.org/stable/c/9e020156833f1ad0d425a1e3d85b65639f1c1c50 (opens in a new tab)
- https://git.kernel.org/stable/c/6ebcbb53fc9bc30843054ed99fd60b8e542628f4 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-45655 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-64082)Record last updated .