Kernel Entry Vulnerability in Linux by The Linux Foundation

CVE-2026-93254

What is CVE-2026-93254?

A vulnerability has been identified in the Linux kernel, particularly concerning the ARM64 architecture's entry logic. During transitions to kernel mode, the kernel calls for local_irq_disable(), expecting interrupts to be off, while in certain contexts, this call is superfluous. For instance, the __el1_irq() context already prohibits IRQs, making local_irq_disable() redundant. Additionally, surrounding this unnecessary function can disrupt pNMI state tracking, possibly resulting in warnings under specific debug configurations. A refactor of the arm64_exit_to_kernel_mode function is proposed to optimize this process, reducing workload in cases where IRQ disabling is not needed.

References