CVE-2026-98951

The Linux kernel contains a vulnerability in the riscv architecture's ptrace implementation. The user_regset_copyin() function only copies a specific number of bytes, which can leave a portion of the stack buffer uninitialized when a PTRACE_SETREGSET request is made with a short iov_len. This uni...

EUVD-2026-108925

In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin userregsetcopyin only copies count bytes, so a PTRACESETREGSET request with a short iovlen leaves the rest of the stack buffer uninitialized. In riscvvrset that garbage ...

CVE-2026-98951 riscv: ptrace: Zero-initialize regset buffers before copyin

In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin userregsetcopyin only copies count bytes, so a PTRACESETREGSET request with a short iovlen leaves the rest of the stack buffer uninitialized. In riscvvrset that garbage ...