CVE-2026-80688

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: drop __init from vec_check_unaligned_access_speed_all_cpus

This function runs within a kthread and need not necessarily finish

before system finishes boot and free_initmem() unmaps the .init.text

section. This function makes calls to SBI for probing unaligned access

speed, and if this is slow for some reason (say some debug prints were

added to SBI), the kthread can still be running at this point and result

in an instruction page fault when trying to fetch from the freed region.

[ 25.642087] Unable to handle kernel paging request at virtual address ffffffff80a04ef8

[ 25.646694] Current vec_check_unali pgtable: 4K pagesize, 48-bit VAs, pgdp=0x00004000316e9000

[ 25.653170] [ffffffff80a04ef8] pgd=000010004be7e401, p4d=000010004be7e401, pud=000010004be7e001, pmd=000010000c3000e3

[ 25.661244] Oops [#1]

[ 25.662997] Modules linked in:

[ 25.665357] CPU: 3 UID: 0 PID: 42 Comm: vec_check_unali Not tainted

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References