CVE-2026-98228

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ

On I6500 CPU cores, lld and scd give no ordering guarantees (same as all

other instructions). To respect the assumption that arch_cmpxchg() is

fully ordered, we must inject sync instructions above and below our

lld/scd loops using the already in place WEAK_REORDERING_BEYOND_LLSC

infrastructure.

Otherwise, bad things can happen:

[ 34.054496] CPU 3 Unable to handle kernel paging request at virtual address 0000000000000000, epc == a80000080838e01c, ra == a80000080838dfc4

[ 34.054559] Oops[#1]:

[ 34.069561] CPU: 3 UID: 0 PID: 170 Comm: pipe_race Not tainted 7.2.0-rc6-01553-gb73c35220968-dirty #103 VOLUNTARY

[ 34.079932] Hardware name: Mobile EyeQ5 MP5 Evaluation board

[ 34.085592] $ 0 : 0000000000000000 0000000000000001 0000000000000000 0000000000000000

[ 34.093616] $ 4 : a800000808ee2618 000000000b7a879d 0000000000001000 0000000000000000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References