CVE-2026-23085

An address truncation vulnerability was found in the Linux kernel's GICv3 ITS interrupt controller driver on 32-bit ARM systems with LPAE Large Physical Address Extension. Physical addresses above 4GB are incorrectly stored in 32-bit unsigned long variables, causing address truncation. When kmall...