CVE-2026-98248

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

arm64: percpu: Fix LSE operations on {8,16}-bit types

The assembly for _percpu##name##case##sz() and _percpu##name##return_case##sz() doesn’t use the ‘sfx’ macro argument to form the LSE instruction. Without ‘sfx’, a W register argument will imply a 32-bit memory location, and consequently {8,16}-bit ops will erroneously read and write 32 bits of memory when the LSE instruction is used.

Fix this by appending ‘sfx’ to ‘op_lse’ to LSE instruction. It is not necessary (and not valid) to append ‘sfx’ to ‘op_llsc’, as ‘op_llsc’ is a register-register operation which does not access memory (and does not take a size suffix).

Affected product:

AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , Debian 11 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 20.04 ELS

Affected packages:

linux @ 5.10.259 (+6 more)

Live-patch status from KernelCare for each operating system.