CVE-2026-68480
Description
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution. Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.
How to fix
- Linux Linuxdfefa3c51370f84acb643cddf98bb42c885d0483, 52db77a13be224e09eb4ba6b4252ae8ab9085c2c, d0208e08d64d99383e09852a76cc3038c5a4c3ab, 6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096, e262f28a69ae9e0791248f93b0173c1d1f3e1d5d, bfe7f9993467ba431b2731437949ac1e2634e771, 61649a2d61cb0dbc673f0f232f0f0c298bf50442, 7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9, 5.10.264, 5.15.215, 6.1.182, 6.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3f9b7101bea1dcb63410c016ceb266f6e9f733c9 ≤ v < dfefa3c51370f84acb643cddf98bb42c885d0483, b35087763a44d1eb45857f799579a351332be505 ≤ v < 52db77a13be224e09eb4ba6b4252ae8ab9085c2c, ac41e90d8daa8815d8bee774a1975435fbfe1ae7 ≤ v < d0208e08d64d99383e09852a76cc3038c5a4c3ab, fb3bd914b3ec28f5fb697ac55c4846ac2d542855 ≤ v < 6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096, fb3bd914b3ec28f5fb697ac55c4846ac2d542855 ≤ v < e262f28a69ae9e0791248f93b0173c1d1f3e1d5d, fb3bd914b3ec28f5fb697ac55c4846ac2d542855 ≤ v < bfe7f9993467ba431b2731437949ac1e2634e771, fb3bd914b3ec28f5fb697ac55c4846ac2d542855 ≤ v < 61649a2d61cb0dbc673f0f232f0f0c298bf50442, fb3bd914b3ec28f5fb697ac55c4846ac2d542855 ≤ v < 7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9, acdc883eb61efbe01b954e782e1124790bd391a8, 5.10.189 ≤ v < 5.10.264, 5.15.125 ≤ v < 5.15.215, 6.1.44 ≤ v < 6.1.182, 6.4.9 ≤ v < 6.5, 6.5 | dfefa3c51370f84acb643cddf98bb42c885d0483, 52db77a13be224e09eb4ba6b4252ae8ab9085c2c, d0208e08d64d99383e09852a76cc3038c5a4c3ab, 6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096, e262f28a69ae9e0791248f93b0173c1d1f3e1d5d, bfe7f9993467ba431b2731437949ac1e2634e771, 61649a2d61cb0dbc673f0f232f0f0c298bf50442, 7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9, 5.10.264, 5.15.215, 6.1.182, 6.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.