CVE-2026-90094
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: process: Fix context switching MTE store-only tag check SCTLR_EL1.TCSO0 is set when user opt-in for MTE store-only tag check mode. However, it is not part of SCTLR_USER_MASK which imply that on context switch we never clear SCTLR_EL1.TCSO0, so we are leaking that setting into another task. Fix that by including SCTLR_EL1_TCSO0_MASK into SCTLR_USER_MASK
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux00a73ce437e27fdc636a5ede445a4a491e01788d, 2f10bc3ff24c91657887901c3235b803e5055f2b, b8f070ac3167595069feb1f794c127b805115645 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4d51ff5bba00a13ca9b0b24883fa7adb07a167fc ≤ v < 00a73ce437e27fdc636a5ede445a4a491e01788d, 4d51ff5bba00a13ca9b0b24883fa7adb07a167fc ≤ v < 2f10bc3ff24c91657887901c3235b803e5055f2b, 4d51ff5bba00a13ca9b0b24883fa7adb07a167fc ≤ v < b8f070ac3167595069feb1f794c127b805115645, 6.17 | 00a73ce437e27fdc636a5ede445a4a491e01788d, 2f10bc3ff24c91657887901c3235b803e5055f2b, b8f070ac3167595069feb1f794c127b805115645 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.