CVE-2026-99017

A flaw was found in the Linux kernel. Under specific configurations on RISC-V systems using T-Head processors, the kernel does not execute early boot checks required to identify hardware errata. As a result, the default mitigation for the Ghostwrite hardware vulnerability is not applied, which ma...

Linux Distros Unpatched Vulnerability : CVE-2026-99017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the...

DEBIAN-CVE-2026-99017

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

CVE-2026-99017

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

CVE-2026-99017

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

UBUNTU-CVE-2026-99017

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

CVE-2026-99017 riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

CVE-2026-99017 riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

EUVD-2026-108811

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the RISCVALTERNATIVESEARLYBOOT stage, and the mitigation in ghostwriteenablemitigation...

CVE-2026-99017

The Linux kernel contains a vulnerability where the T-Head C9xx CPU might not have its ghostwrite mitigation applied correctly. The root cause is that errata_probe_ghostwrite() only marks the CPU as vulnerable during the RISCV_ALTERNATIVES_EARLY_BOOT stage. In kernels where ERRATA_THEAD_GHOSTWRIT...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.14. It arises when RISCVALTERNATIVEEARLY is not selected when ERRATATHEADGHOSTWRITE is enabled but ERRATATHEADMAE is not. As a result, the GHOSTWRITE vulnerability on T-head C9xx CPUs is not detected during the early boot phase. No...

PT-2026-121994

In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV ALTERNATIVE EARLY for THEAD GHOSTWRITE errata probe ghostwrite only marks the CPU as vulnerable when it is called at the RISCV ALTERNATIVES EARLY BOOT stage, and the mitigation in ghostwrite enable...

CVE-2024-44067

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...

CVE-2024-44067: Improper Restriction of Operations within the Bounds of a Memory Buffer

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...

CVE-2024-44067

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...

T-Head XuanTie C910 and C920 have security vulnerabilities

The T-Head XuanTie C910 and T-Head XuanTie C920 are both high-efficiency CPU processors from China-based T-Head. A security vulnerability exists in the T-Head XuanTie C910 and C920 that stems from an instruction that allows an unprivileged attacker to write to an arbitrary physical memory locatio...

CVE-2024-44067

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 are susceptible to a hardware vulnerability known as GhostWrite . The root cause involves specific instructions that allow unprivileged attackers to write to arbitrary physical memory locations . Pr...

CVE-2024-44067

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

A team of researchers from the CISPA Helmholtz Center for Information Security in Germany has disclosed an architectural bug impacting Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs that could allow attackers to gain unrestricted access to susceptible devices. The vulnerability h...