CVE-2026-64252

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

MIPS: DEC: Prevent initial console buffer from landing in XKPHYS

In 64-bit configurations calling the initial console output handler from

a kernel thread other than the initial one will result in a situation

where the stack has been placed in the XKPHYS 64-bit memory segment and

consequently so has been the buffer allocated there that is used as the

argument corresponding to the `%s' output conversion specifier for the

firmware's printf() entry point.

This 64-bit address will then be truncated by 32-bit firmware, resulting

in an attempt to access the wrong memory location, which in turn will

cause all kinds of unpredictable behaviour, such as a kernel crash:

Console: colour dummy device 160x64

Calibrating delay loop... 49.36 BogoMIPS (lpj=192512)

pid_max: default: 32768 minimum: 301

CPU 0 Unable to handle kernel paging request at virtual address 000000000203bd00, epc == ffffffffbfc08364, ra == ffffffffbfc08

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References