CVE-2026-80560

A flaw was found in the Linux kernel, specifically within the openrisc architecture's signal handling. An unprivileged local attacker can exploit a vulnerability in the restoresigcontext function by crafting a malicious signal frame. This allows the attacker to disable the Data Memory Management...

EUVD-2026-66475

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2025-51679

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

CVE-2025-51675

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560

This Linux kernel vulnerability affects the OpenRISC (or1k) architecture signal handling path. The function restore_sigcontext() copies the entire supervision register (SR) from a user-controlled signal frame and only clears the SPR_SR_SM bit before reloading it into hardware. All other privilege...

CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

Linux Distros Unpatched Vulnerability : CVE-2026-80560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clea...

CVE-2025-51675

CVE-2025-51675 affects the openRISC OR1200 RISC-V processor, specifically at commit 83ac6b . The vulnerability stems from an inaccurate update of program counter (PC) values when SPR (Special Purpose Register) changes , which can result in a Denial of Service (DoS) . The CVSS 3.1 score is 7.5 (HI...

CVE-2025-51679

CVE-2025-51679 affects the openRISC OR1200 processor at commit 83ac6b , where a mismatch between the RTL (Register Transfer Level) and the netlist can lead to unexpected behavior . The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector , low complexity , no privileges re...

EUVD-2025-210801

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

EUVD-2025-210799

An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...

PT-2026-82176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the restore sigcontext function where the supervision register SR is copied from the signal frame without properly clearing privileged bits before returning to user...

CVE-2026-72154

A flaw was found in the Linux kernel, specifically within the OpenRISC architecture's handling of jump label synchronization in Symmetric Multiprocessing SMP systems. The implementation did not correctly invalidate instruction caches icaches on remote processor cores after updates. This oversight...

Linux Distros Unpatched Vulnerability : CVE-2026-72154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d openrisc: Add jump label support copies from arm64 and does not properly consider how icach...

CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

UBUNTU-CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

CVE-2026-72154

CVE-2026-72154 describes a Linux kernel vulnerability in the OpenRISC path related to jump_label SMP cache syncing. The issue arose from an OpenRISC-specific implementation that copied from arm64 and didn’t correctly handle icache invalidation on remote cores, which could leave stale static_key c...