# CVE-2026-23102: linux: In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE con... CVE-2026-23102 is fixed in 60 products on 1 platform, first by DEBIAN-CVE-2026-23102, released February 4, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-23102 - Priority: High - CVSS: 7.1 (high) - EPSS: 0.0014 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Feb 4, 2026 ## Description In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read from out-of-bounds memory (and may potentially take a fatal fault) and/or may kill the task with a SIGKILL. (1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into an invalid state where SVCR.SM is set (and sve_state is non-NULL) but TIF_SME is clear, consequently resuting in out-of-bounds memory reads and/or killing the task with SIGKILL. This can only occur in unusual (but legitimate) cases where the SVE signal context has either been modified by userspace or was saved in the context of another task (e.g. as with CRIU), as otherwise the presence of an SVE signal context with SVE_SIG_FLAG_SM implies that TIF_SME is already set. While in this state, task_fpsimd_load() will NOT configure SMCR_ELx (leaving some arbitrary value configured in hardware) before restoring SVCR and attempting to restore the streaming mode SVE registers from memory via sve_load_state(). As the value of SMCR_ELx.LEN may be larger than the task's streaming SVE vector length, this may read memory outside of the task's allocated sve_state, reading unrelated data and/or triggering a fault. While this can result in secrets being loaded into streaming SVE registers, these values are never exposed. As TIF_SME is clear, fpsimd_bind_task_to_cpu() will configure CPACR_ELx.SMEN to trap EL0 accesses to streaming mode SVE registers, so these cannot be accessed directly at EL0. As fpsimd_save_user_state() verifies the live vector length before saving (S)SVE state to memory, no secret values can be saved back to memory (and hence cannot be observed via ptrace, signals, etc). When the live vector length doesn't match the expected vector length for the task, fpsimd_save_user_state() will send a fatal SIGKILL signal to the task. Hence the task may be killed after executing userspace for some period of time. (2) Restoring a context with SVE_SIG_FLAG_SM clear does not clear the task's SVCR.SM. If SVCR.SM was set prior to restoring the context, then the task will be left in streaming mode unexpectedly, and some register state will be combined inconsistently, though the task will be left in legitimate state from the kernel's PoV. This can only occur in unusual (but legitimate) cases where ptrace has been used to set SVCR.SM after entry to the sigreturn syscall, as syscall entry clears SVCR.SM. In these cases, the the provided SVE register data will be loaded into the task's sve_state using the non-streaming SVE vector length and the FPSIMD registers will be merged into this using the streaming SVE vector length. Fix (1) by setting TIF_SME when setting SVCR.SM. This also requires ensuring that the task's sme_state has been allocated, but as this could contain live ZA state, it should not be zeroed. Fix (2) by clearing SVCR.SM when restoring a SVE signal context with SVE_SIG_FLAG_SM clear. For consistency, I've pulled the manipulation of SVCR, TIF_SVE, TIF_SME, and fp_type earlier, immediately after the allocation of sve_state/sme_state, before the restore of the actual register state. This makes it easier to ensure that these are always modified consistently, even if a fault is taken while reading the register data from the signal context. I do not expect any software to depend on the exact state restored when a fault is taken while reading the context. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | bpftool-debuginfo amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | bpftool6.12 amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | bpftool6.12-debuginfo amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | dtb-aarch64 opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-64kb opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-64kb sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-azure opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-azure sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-azure sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-debuginfo amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-debuginfo-common-aarch64 amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-debuginfo-common-x86_64 amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-default opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-default sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-default sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-default-base opensuse-leap 16.0 | 6.12.0-160000.27.1.160000.2.8 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.34.1.150700.17.23.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-default-base sles 16.0 | 6.12.0-160000.27.1.160000.2.8 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-devel amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-docs opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-docs sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-headers amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-kvmsmall opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-kvmsmall sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-libbpf amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-libbpf-debuginfo amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-libbpf-devel amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-libbpf-static amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-livepatch-6.1.163-186.299 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-livepatch-6.12.80-105.147 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel-livepatch-SLE15-SP7-RT_Update_10 sles 15.7 | 1-150700.1.3.1 | [SUSE-SU-2026:0962-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0962-1.md) | Mar 23, 2026 | | Linux | kernel-livepatch-SLE15-SP7_Update_10 sles 15.7 | 1-150700.15.3.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-modules-extra amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-modules-extra-common amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-obs-build opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-obs-qa opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-obs-qa sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-rt opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-source opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-source sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-source sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-syms opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-syms sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel-tools amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-tools-debuginfo amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-tools-devel amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | kernel-zfcpdump opensuse-leap 16.0 | 6.12.0-160000.27.1 | [OPENSUSE-SU-2026:20416-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20416-1.md) | Mar 25, 2026 | | Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.34.1 | [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | Mar 26, 2026 | | Linux | kernel-zfcpdump sles 16.0 | 6.12.0-160000.27.1 | [SUSE-SU-2026:20931-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20931-1.md) | Mar 25, 2026 | | Linux | kernel6.12 amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-debuginfo amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-debuginfo-common-aarch64 amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-debuginfo-common-x86_64 amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-devel amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-headers amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-libbpf amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-libbpf-debuginfo amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-libbpf-devel amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-libbpf-static amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-modules-extra amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-modules-extra-common amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-tools amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-tools-debuginfo amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | kernel6.12-tools-devel amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | linux Debian 12.15 (bookworm) | 6.1.162-1 | [DEBIAN-CVE-2026-23102](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23102.md) | Feb 4, 2026 | | Linux | linux Debian 14 | 6.18.8-1 | [DEBIAN-CVE-2026-23102](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23102.md) | Feb 4, 2026 | | Linux | perf amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | perf-debuginfo amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | perf6.12 amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | perf6.12-debuginfo amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | python3-perf amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | python3-perf-debuginfo amzn 2023 | 1:6.1.163-186.299.amzn2023 | [ALAS2023-2026-1468](https://patchblox.com/security/data/fix/linux/alas2023-2026-1468.md) | Mar 2, 2026 | | Linux | python3-perf6.12 amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | | Linux | python3-perf6.12-debuginfo amzn 2023 | 1:6.12.80-105.147.amzn2023 | [ALAS2023-2026-1646](https://patchblox.com/security/data/fix/linux/alas2023-2026-1646.md) | May 11, 2026 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.