{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "503638e0babf364061bc50fca5103b00a56cc50a"
            },
            {
              "fixed": "c4df24702bfc3cd2bed7746b94dc6139a3fa5428"
            },
            {
              "fixed": "4d730cab96e6b75e4a07c4baf37294ebc07f795e"
            },
            {
              "fixed": "ede985ff4b569ed2454024f8bb107a6729fe08aa"
            },
            {
              "fixed": "1b2c6b56a9fa0dcbef461039937de22b1cbecc7d"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.12.0"
            },
            {
              "fixed": "6.12.96"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.39"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64592.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: mm: Unconditionally sfence.vma for spurious fault\n\nSvvptc does not guarantee that it's safe to just return here. Since we\nhave already cleared our bit, if, theoretically, the bounded timeframe\nfor the accessed page to become valid still hasn't happened after sret,\nwe could fault again and actually crash.\n\nHopefully, these spurious faults should be rare enough that this is an\nacceptable slowdown.",
  "id": "CVE-2026-64592",
  "modified": "2026-08-08T03:30:23.346812614Z",
  "published": "2026-08-06T07:13:49.098Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1b2c6b56a9fa0dcbef461039937de22b1cbecc7d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4d730cab96e6b75e4a07c4baf37294ebc07f795e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c4df24702bfc3cd2bed7746b94dc6139a3fa5428"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ede985ff4b569ed2454024f8bb107a6729fe08aa"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64592.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64592"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.8.0",
  "summary": "riscv: mm: Unconditionally sfence.vma for spurious fault"
}