CVE-2026-68480: In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET
In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Make Safe-RET robust against interrupt injection
An attacker injecting interrupts while the Safe-RET mitigation executes
on machines affected by SRSO can neutralize the safe return sequence,
potentially leading to data leakage through speculative execution.
Fixup register state as if the Safe-RET sequence executed successfully
by "emulating" it, in a manner of speaking, and avoid executing a RET
instruction after returning from the interrupt.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-68480
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-68480 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for In the Linux
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownCVE-2026-19149: Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote atta…nvd · 2026-08-06
- unknownCVE-2026-19148: Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote …nvd · 2026-08-06
- unknownCVE-2026-19147: Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote atta…nvd · 2026-08-06
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund · 2026-08-06
- medium[NEW] [medium] Linux Kernel: Multiple Vulnerabilitiescert-bund · 2026-08-06
- high[UPDATE] [high] Linux Kernel: Vulnerability allows privilege escalationcert-bund · 2026-08-06
More from NVD Recent CVEs
- highCVE-2026-8325: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds …2026-08-06
- highCVE-2026-7867: A flaw was found in udisks2. A local attacker with an active console session can exploit insuff…2026-08-06
- highCVE-2026-7406: A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untr…2026-08-06
- mediumCVE-2026-7405: A maliciously crafted TIF file, when parsed through certain Autodesk products during image impo…2026-08-06
- mediumCVE-2026-71555: PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.…2026-08-06