Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-23354
PUBLISHED
More InfoOfficial Page
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
View Known Exploited Vulnerability (KEV) details
Published At-25 Mar, 2026 | 10:27
Updated At-13 Apr, 2026 | 06:05
Rejected At-
▼CVE Numbering Authority (CNA)
x86/fred: Correct speculative safety in fred_extint()

In the Linux kernel, the following vulnerability has been resolved: x86/fred: Correct speculative safety in fred_extint() array_index_nospec() is no use if the result gets spilled to the stack, as it makes the believed safe-under-speculation value subject to memory predictions. For all practical purposes, this means array_index_nospec() must be used in the expression that accesses the array. As the code currently stands, it's the wrong side of irqentry_enter(), and 'index' is put into %ebp across the function call. Remove the index variable and reposition array_index_nospec(), so it's calculated immediately before the array access.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • arch/x86/entry/entry_fred.c
Default Status
unaffected
Versions
Affected
  • From 14619d912b658ecd9573fb88400d3830a29cadcb before 3bc5887b0a2b06d2d9c22f1f4f8500490b3ae643 (git)
  • From 14619d912b658ecd9573fb88400d3830a29cadcb before e58f1a9b0677de24dcfee0b21393446ec92ff120 (git)
  • From 14619d912b658ecd9573fb88400d3830a29cadcb before 92caa5274b99cb6729177232a029ce0dfa6c5f7b (git)
  • From 14619d912b658ecd9573fb88400d3830a29cadcb before aa280a08e7d8fae58557acc345b36b3dc329d595 (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • arch/x86/entry/entry_fred.c
Default Status
affected
Versions
Affected
  • 6.9
Unaffected
  • From 0 before 6.9 (semver)
  • From 6.12.77 through 6.12.* (semver)
  • From 6.18.17 through 6.18.* (semver)
  • From 6.19.7 through 6.19.* (semver)
  • From 7.0 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/3bc5887b0a2b06d2d9c22f1f4f8500490b3ae643
N/A
https://git.kernel.org/stable/c/e58f1a9b0677de24dcfee0b21393446ec92ff120
N/A
https://git.kernel.org/stable/c/92caa5274b99cb6729177232a029ce0dfa6c5f7b
N/A
https://git.kernel.org/stable/c/aa280a08e7d8fae58557acc345b36b3dc329d595
N/A
Hyperlink: https://git.kernel.org/stable/c/3bc5887b0a2b06d2d9c22f1f4f8500490b3ae643
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/e58f1a9b0677de24dcfee0b21393446ec92ff120
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/92caa5274b99cb6729177232a029ce0dfa6c5f7b
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/aa280a08e7d8fae58557acc345b36b3dc329d595
Resource: N/A
Details not found