-

CVE-2026-90094

arm64: process: Fix context switching MTE store-only tag check

In the Linux kernel, the following vulnerability has been resolved:

arm64: process: Fix context switching MTE store-only tag check

SCTLR_EL1.TCSO0 is set when user opt-in for MTE store-only tag check
mode. However, it is not part of SCTLR_USER_MASK which imply that on
context switch we never clear SCTLR_EL1.TCSO0, so we are leaking that
setting into another task.

Fix that by including SCTLR_EL1_TCSO0_MASK into SCTLR_USER_MASK
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4d51ff5bba00a13ca9b0b24883fa7adb07a167fc
Version < 00a73ce437e27fdc636a5ede445a4a491e01788d
Status affected
Version 4d51ff5bba00a13ca9b0b24883fa7adb07a167fc
Version < 2f10bc3ff24c91657887901c3235b803e5055f2b
Status affected
Version 4d51ff5bba00a13ca9b0b24883fa7adb07a167fc
Version < b8f070ac3167595069feb1f794c127b805115645
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.17
Status affected
Version 0
Version < 6.17
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.099
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/00a73ce437e27fdc636a5ede445a4a491e01788d
https://git.kernel.org/stable/c/2f10bc3ff24c91657887901c3235b803e5055f2b
https://git.kernel.org/stable/c/b8f070ac3167595069feb1f794c127b805115645