Review reviewHigh

CVE-2026-64235

Linux

In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIG_CALL_DEPTH_TRACKING enabled on an x86 retbleed-affected platform (eg: Skylake), with retbleed=stuff, registering a dynamic ftrace trampoline crashes on the first call into the traced function: BUG: unable to handle page fault for address: ffff88817ae18880 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 4b53067 P4D 4b53067 PUD 0 Oops: Oops: 0002 [#1] SMP PTI CPU: 3 UID: 0 PID: 187 Comm: usleep Not tain...

CVSS: 8.1
EPSS: -
CISA KEV: Not listed
Published: 2026.07.25

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 8.1

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 59bec00ace28d565ae0a68b23063ef3b961d82d5 < 8093442a2d1d4b42b9340a86023ccb2afb30b93a, >= 59bec00ace28d565ae0a68b23063ef3b961d82d5 < d59cc66b702757e3c5a711e78a38583eac0c2738, >= 59bec00ace28d565ae0a68b23063ef3b961d82d5 < 9edff632ca216169846f8a63a5a3dc467e239c7a, >= 59bec00ace28d565ae0a68b23063ef3b961d82d5 < a17dc12bfed8868e6a86f3b45c16065a70641acb, >= 6.9
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available