CVE-2026-23114

Description

A flaw was found in the Linux kernel's arm64 floating-point/SIMD state management. On systems with SVE but without SME support, a ptrace write to the NT_ARM_SVE regset can leave the tracee in an inconsistent state where SVE data is stored but the TIF_SVE flag is not set. This triggers a kernel warning in fpsimd_restore_current_state(), though the function self-corrects by setting the flag before any observable issue occurs.

Statement

This is a code quality issue that triggers a kernel warning but has no functional impact. The state inconsistency is automatically corrected by fpsimd_restore_current_state() before it can affect program execution. The fix ensures consistent flag setting during ptrace SVE register writes on arm64 systems without SME.

Common Vulnerability Scoring System (CVSS) Score Details

Info alert:Important note

CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).

The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 Score Breakdown

Red HatNVDcve.org
Base Score5.55.5N/A
Attack VectorLocalLocalN/A
Attack ComplexityLowLowN/A
Privileges RequiredLowLowN/A
User InteractionNoneNoneN/A
ScopeUnchangedUnchangedN/A
ConfidentialityNoneNoneN/A
Integrity ImpactNoneNoneN/A
Availability ImpactHighHighN/A

Vector

Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Understanding the Weakness (CWE)

CWE-480

Other

Technical Impact: Alter Execution Logic

This weakness can cause unintended logic to be executed and other unexpected application behavior.

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.