Description
In the Linux kernel, the following vulnerability has been resolved:

powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()

mask_user_address() incorrectly checks for CONFIG_E500 instead of
CONFIG_PPC_E500, causing mask_user_address_isel() to not be used on
E500 hardware. Fix the check to use the correct name.
Published: 2026-08-15
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A logic bug in the Linux kernel's powerpc/uaccess code causes mask_user_address() to check the wrong configuration symbol, CONFIG_E500 instead of the intended CONFIG_PPC_E500. As a result, the optimized address-masking routine mask_user_address_isel() is skipped on E500 hardware. This incorrect masking can allow user-space code to reference memory addresses that should be protected, potentially leading to kernel memory corruption and elevation of privilege. The weakness aligns with a protection‑mechanism failure profile (CWE‑693).

Affected Systems

All Linux kernel builds that run on PowerPC E500 processors and compile with the buggy configuration are affected. The specific kernel versions are not enumerated, but any release that contains the faulty configuration check is impacted until the patch is applied by the vendor.

Risk and Exploitability

No CVSS or EPSS score is publicly available, and the vulnerability is not listed in the CISA KEV catalog. The lack of quantitative metrics means the exact severity is unclear, but the described flaw permits a local kernel code execution path that could be leveraged for privilege escalation. Exploitation likely requires root or the ability to execute code in the kernel context, and no public exploit has been reported at this time.

Generated by OpenCVE AI on August 15, 2026 at 07:48 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a kernel update that includes the patch referenced in the kernel commit logs
  • Rebuild the kernel ensuring that CONFIG_PPC_E500 is correctly enabled and the correct configuration check is present in mask_user_address()
  • Verify the kernel configuration and re‑compile if necessary to confirm that the defect has been resolved

Generated by OpenCVE AI on August 15, 2026 at 07:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() mask_user_address() incorrectly checks for CONFIG_E500 instead of CONFIG_PPC_E500, causing mask_user_address_isel() to not be used on E500 hardware. Fix the check to use the correct name.
Title powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:51:30.274Z

Reserved: 2026-07-30T09:28:09.396Z

Link: CVE-2026-68473

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:20:29.240

Modified: 2026-08-15T06:20:29.240

Link: CVE-2026-68473

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T08:15:04Z

Weaknesses

No weakness.