PT-2026-8107 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-14 · CVE-2026-23114

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to the handling of SVE (Scalable Vector Extension) writes during ptrace operations on systems that support SVE but do not support SME (Scalable Matrix Extension). Specifically, when writing to the NT ARM SVE register set, the tracee can be left in an invalid state where SVE register data is stored in FP STATE SVE format without TIF SVE being set. This can trigger a warning from fpsimd restore current state(), although no functional issue is observed. The issue was introduced during rework to error handling and was resolved by removing a check related to system supports sme(), ensuring TIF SVE is set for SVE-formatted writes. The manipulation of the svcr value is considered benign and inexpensive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23114

Affected Products

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23114.json · Exploit
• https://git.kernel.org/stable/c/4f39984176e7edcaba3432b6c649c6fe93bf2f80 · Patch
• https://osv.dev/vulnerability/CVE-2026-23114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23114 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23114 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23114 · Vendor Advisory
• https://git.kernel.org/stable/c/128a7494a9f15aad60cc6b7e3546bf481ac54a13 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23114 · Security Note
• https://ubuntu.com/security/CVE-2026-23114 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23114 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2022702107850420723 · Twitter Post
• https://git.kernel.org/linus/128a7494a9f15aad60cc6b7e3546bf481ac54a13 · Note