OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90383

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically in the handling of page-table walks by the GRU TLB miss handler, which operates without proper locking mechanisms or references to mapped pages. This could lead to potential security risks due to improper access to user page tables, particularly on x86-64 architectures. Organizations using Linux systems, especially those leveraging the GRU for memory management, should prioritize addressing this issue to mitigate possible exploitation risks.

CVE
CVE-2026-90383
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user page tables and supports only PMD-level large mappings on x86-64. Remove the direct walker. Send interrupt faults directly to user polling mode so the existing call-OS fallback retries them in process context. Remove the mmap-lock failure statistic that can no longer be incremented.