CVE-2026-23345 — Symbolic Name not Mapping to Correct Object in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 94.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled
When FEAT_LPA2 is enabled, bits 8-9 of the PTE replace the
shareability attribute with bits 50-51 of the output address. The
_PAGE_GCS{,_RO} definitions include the PTE_SHARED bits as 0b11 (this
matches the other _PAGE_* definitions) but using this macro directly
leads to the following panic when enabling GCS on a system/model with
LPA2:
Unable to handl…
Affected Packages3 packages
▶CVEListV5linux/linux6497b66ba6945f142902c7e8fce86e47016ead1c — ca1684dd297bf0725c1d487cff80e615497accf6+3
🔴Vulnerability Details
4GHSA▶
GHSA-67rr-wm48-f5vp: In the Linux kernel, the following vulnerability has been resolved:
arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled
When F↗2026-03-25
OSV▶
CVE-2026-23345: In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled When FEA↗2026-03-25