|
ELS
< Back

CVE-2026-68480

Updated on 06 Aug 2026

Severity

Awaiting Analysis

Details

Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

x86/bugs: Make Safe-RET robust against interrupt injection

An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution.

Fixup register state as if the Safe-RET sequence executed successfully by “emulating” it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.

Details

Affected product:
AlmaLinux 9.2 ESU , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , Debian 11 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU
Affected packages:
kernel @ 3.10.0 (+10 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 12 Planned —
Debian 13 Planned —
Oracle Linux 7 UEK 6 Released
28 kernels
  • 5.4.17-2136.324.5.3.el7uek
  • 5.4.17-2136.325.5.el7uek
  • 5.4.17-2136.325.5.1.el7uek
  • 5.4.17-2136.326.6.el7uek
  • 5.4.17-2136.326.6.1.el7uek
  • 5.4.17-2136.327.2.el7uek
  • 5.4.17-2136.328.3.el7uek
  • 5.4.17-2136.329.3.1.el7uek
  • 5.4.17-2136.329.3.2.el7uek
  • 5.4.17-2136.330.7.1.el7uek
  • 5.4.17-2136.331.7.el7uek
  • 5.4.17-2136.330.7.4.el7uek
  • 5.4.17-2136.332.5.2.el7uek
  • 5.4.17-2136.333.5.el7uek
  • 5.4.17-2136.330.7.5.el7uek
  • 5.4.17-2136.333.5.1.el7uek
  • 5.4.17-2136.334.6.el7uek
  • 5.4.17-2136.334.6.1.el7uek
  • 5.4.17-2136.335.4.el7uek
  • 5.4.17-2136.335.4.1.el7uek
  • 5.4.17-2136.336.5.1.el7uek
  • 5.4.17-2136.337.5.el7uek
  • 5.4.17-2136.337.5.1.el7uek
  • 5.4.17-2136.336.5.3.el7uek
  • 5.4.17-2136.336.5.3.1.el7uek
  • 5.4.17-2136.336.5.3.2.el7uek
  • 5.4.17-2136.338.4.1.el7uek
  • 5.4.17-2136.338.4.2.el7uek
Oracle Linux 8 UEK 6 Released
76 kernels
  • 5.4.17-2136.324.5.2.el8uek
  • 5.4.17-2136.324.5.3.el8uek
  • 5.4.17-2136.325.5.el8uek
  • 5.4.17-2136.325.5.1.el8uek
  • 5.4.17-2136.326.6.el8uek
  • 5.4.17-2136.326.6.1.el8uek
  • 5.4.17-2136.327.2.el8uek
  • 5.4.17-2136.328.3.el8uek
  • 5.4.17-2136.329.3.1.el8uek
  • 5.4.17-2136.329.3.2.el8uek
  • 5.4.17-2136.330.7.1.el8uek
  • 5.4.17-2136.331.7.el8uek
  • 5.4.17-2136.330.7.4.el8uek
  • 5.4.17-2136.332.5.2.el8uek
  • 5.4.17-2136.333.5.el8uek
  • 5.4.17-2136.330.7.5.el8uek
  • 5.4.17-2136.333.5.1.el8uek
  • 5.4.17-2136.334.6.el8uek
  • 5.4.17-2136.334.6.1.el8uek
  • 5.4.17-2136.335.4.el8uek
  • 5.4.17-2136.335.4.1.el8uek
  • 5.4.17-2136.336.5.1.el8uek
  • 5.4.17-2136.337.5.el8uek
  • 5.4.17-2136.337.5.1.el8uek
  • 5.4.17-2136.336.5.3.el8uek
  • 5.4.17-2136.336.5.3.1.el8uek
  • 5.4.17-2136.336.5.3.2.el8uek
  • 5.4.17-2136.338.4.1.el8uek
  • 5.4.17-2136.338.4.2.el8uek
  • 5.4.17-2136.339.5.el8uek
  • 5.4.17-2136.339.5.1.el8uek
  • 5.4.17-2136.339.5.2.el8uek
  • 5.4.17-2136.340.4.1.el8uek
  • 5.4.17-2136.341.3.3.el8uek
  • 5.4.17-2136.341.3.1.el8uek
  • 5.4.17-2136.342.5.el8uek
  • 5.4.17-2136.342.5.3.el8uek
  • 5.4.17-2136.343.5.1.el8uek
  • 5.4.17-2136.344.4.1.el8uek
  • 5.4.17-2136.343.5.3.el8uek
  • 5.4.17-2136.344.4.3.el8uek
  • 5.4.17-2136.345.5.3.el8uek
  • 5.4.17-2136.346.6.el8uek
  • 5.4.17-2136.343.5.5.el8uek
  • 5.4.17-2136.347.6.el8uek
  • 5.4.17-2136.347.6.1.el8uek
  • 5.4.17-2136.347.6.2.el8uek
  • 5.4.17-2136.347.6.3.el8uek
  • 5.4.17-2136.343.5.6.el8uek
  • 5.4.17-2136.347.6.4.el8uek
  • 5.4.17-2136.348.3.el8uek
  • 5.4.17-2136.348.3.1.el8uek
  • 5.4.17-2136.349.3.1.el8uek
  • 5.4.17-2136.349.3.2.el8uek
  • 5.4.17-2136.350.3.1.el8uek
  • 5.4.17-2136.350.3.2.el8uek
  • 5.4.17-2136.351.3.1.el8uek
  • 5.4.17-2136.351.3.2.el8uek
  • 5.4.17-2136.351.3.3.el8uek
  • 5.4.17-2136.352.5.el8uek
  • 5.4.17-2136.352.5.1.el8uek
  • 5.4.17-2136.353.3.el8uek
  • 5.4.17-2136.354.4.1.el8uek
  • 5.4.17-2136.354.4.2.el8uek
  • 5.4.17-2136.354.4.3.el8uek
  • 5.4.17-2136.355.3.1.el8uek
  • 5.4.17-2136.355.3.3.el8uek
  • 5.4.17-2136.355.3.4.el8uek
  • 5.4.17-2136.356.4.1.el8uek
  • 5.4.17-2136.356.4.2.el8uek
  • 5.4.17-2136.356.4.3.el8uek
  • 5.4.17-2136.357.3.1.el8uek
  • 5.4.17-2136.357.3.2.el8uek
  • 5.4.17-2136.357.3.3.el8uek
  • 5.4.17-2136.357.3.4.el8uek
  • 5.4.17-2136.358.2.el8uek
Oracle Linux 8 UEK 7 Planned —
Oracle Linux 9 UEK 7 Planned —
RHEL 10 Planned —
RHEL 8 Planned —
RHEL 9 Planned —