Memory Truncation Issue in Linux Kernel Affecting 64-bit Configurations

CVE-2026-64252

What is CVE-2026-64252?

A memory truncation vulnerability in the Linux Kernel allows for improper handling of console output when invoked from non-initial kernel threads in 64-bit configurations. This situation can lead to incorrect memory accesses due to address truncation, resulting in unpredictable system behavior, including kernel crashes. The problem originated from the initial console buffer being allocated in a 64-bit memory segment, which is then truncated when processed by a 32-bit firmware. To mitigate this issue, the buffer should be made static and correctly placed in a 32-bit compatibility segment, with necessary assertions added to validate memory allocation.

References