CVE-2026-68435

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> LoongArch: Fix address space mismatch in kexec command line lookup<br /> <br /> When searching the loaded segments for the "kexec" command line marker,<br /> the kexec_load(2) path (file_mode == 0) passes the user-space segment<br /> buffer straight to strncmp() through a bogus (char __user *) cast. This<br /> dereferences a user pointer in kernel context, which is wrong and is<br /> flagged by sparse:<br /> <br /> arch/loongarch/kernel/machine_kexec.c:84:51: sparse: incorrect type in<br /> argument 2 (different address spaces) @@ expected char const * @@ got<br /> char [noderef] __user *<br /> <br /> Here copy the marker-sized prefix of each segment into a small on-stack<br /> buffer with copy_from_user() before comparing, and skip segments that<br /> fault. The subsequent copy_from_user() that stages the full command line<br /> into the safe area is left unchanged.