CVE-2026-45993
Published May 27, 2026
Modified May 27, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add spectre boundry for syscall dispatch table The LoongArch syscall number is directly controlled by userspace, but does not have a array_index_nospec() boundry to prevent access past the syscall function pointer tables.
References
Other References
https://git.kernel.org/stable/c/07040904ad217545be096d4280ed33c02f6a3750
https://git.kernel.org/stable/c/0c965d2784fbbd7f8e3b96d875c9cfdf7c00da3d
https://git.kernel.org/stable/c/108f2cd13577a410c0ad6ea00708596d9d0dfc90
https://git.kernel.org/stable/c/85cbf7fb568af5358aae61925c4e66b8f5e1439d
https://git.kernel.org/stable/c/bc84a109c2082dd0c4b38e8d923c046b41977533
Frequently Asked Questions
What is CVE-2026-45993? +
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Add spectre boundry for syscall dispatch table
The LoongArch syscall number is directly controlled by userspace, but
does not have a array_index_nospec() boundry to prevent access past the
syscall function pointer tables.
How do I check if I'm vulnerable to CVE-2026-45993? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.