x86/bugs: Make Safe-RET robust against interrupt injection

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-68480
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-08-06 22:18:24 UTC
Updated2026-08-07 07:16:28 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution. Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 dfefa3c51370f84acb643cddf98bb42c885d0483 git Not specified
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 52db77a13be224e09eb4ba6b4252ae8ab9085c2c git Not specified
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 d0208e08d64d99383e09852a76cc3038c5a4c3ab git Not specified
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096 git Not specified
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 e262f28a69ae9e0791248f93b0173c1d1f3e1d5d git Not specified
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 bfe7f9993467ba431b2731437949ac1e2634e771 git Not specified
CNA Linux Linux affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 61649a2d61cb0dbc673f0f232f0f0c298bf50442 git Not specified
CNA Linux Linux affected 5.10.264 semver Not specified
CNA Linux Linux affected 5.15.215 semver Not specified
CNA Linux Linux affected 6.1.182 semver Not specified
CNA Linux Linux affected 6.6.150 semver Not specified
CNA Linux Linux affected 6.12.102 semver Not specified
CNA Linux Linux affected 6.18.43 semver Not specified
CNA Linux Linux affected 7.1.7 semver Not specified
CNA Linux Linux unaffected 5.10.264 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.215 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.182 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.150 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.102 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.43 6.18.* semver Not specified
CNA Linux Linux unaffected 7.1.7 7.1.* semver Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/e262f28a69ae9e0791248f93b0173c1d1f3e1d5d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d0208e08d64d99383e09852a76cc3038c5a4c3ab 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/52db77a13be224e09eb4ba6b4252ae8ab9085c2c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/61649a2d61cb0dbc673f0f232f0f0c298bf50442 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/bfe7f9993467ba431b2731437949ac1e2634e771 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/dfefa3c51370f84acb643cddf98bb42c885d0483 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/608c8f5dccaaf8b8d2b28c0fbdd439d144be62b0 MITRE git.kernel.org
git.kernel.org/stable/c/95b08cdd603fe79d2e9d5212fbb13d577c835f4f MITRE git.kernel.org
git.kernel.org/stable/c/9c0b8105e919be5208c81d5516a194a28c58fe1e MITRE git.kernel.org
git.kernel.org/stable/c/9de1a49e8f1fbf7c372902573a27a97d4ab4d0af MITRE git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report