CVE-2026-68480

Summary

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Make Safe-RET robust against interrupt injection

An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution.

Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9de1a49e8f1fbf7c372902573a27a97d4ab4d0afaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9c0b8105e919be5208c81d5516a194a28c58fe1eaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 95b08cdd603fe79d2e9d5212fbb13d577c835f4faffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 608c8f5dccaaf8b8d2b28c0fbdd439d144be62b0affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < bfe7f9993467ba431b2731437949ac1e2634e771affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 61649a2d61cb0dbc673f0f232f0f0c298bf50442affected
LinuxLinux0 < 5.10.263affected
LinuxLinux0 < 5.15.214affected
LinuxLinux0 < 6.1.181affected
LinuxLinux0 < 6.6.149affected
LinuxLinux0 < 6.18.43affected
LinuxLinux0 < 7.1.7affected
LinuxLinux5.10.263 <= 5.10.*unaffected
LinuxLinux5.15.214 <= 5.15.*unaffected
LinuxLinux6.1.181 <= 6.1.*unaffected
LinuxLinux6.6.149 <= 6.6.*unaffected
LinuxLinux6.18.43 <= 6.18.*unaffected
LinuxLinux7.1.7 <= 7.1.*unaffected

Weaknesses

References