Answer in brief
CVE-2026-68474 records a High severity (CVSS 7.8) vulnerability in powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a352894d07059649398c4769dc8b645e1a1dad88 <aa7aa8ba40c089762d821e3987aaae19e1f5705c || >=a352894d07059649398c4769dc8b645e1a1dad88 <d479a7711f8ff127946467b910d947bd971b94ed || >=a352894d07059649398c4769dc8b645e1a1dad88 <9d3569bfdceda69d5ffd5148901e57b69954d9ef || >=a352894d07059649398c4769dc8b645e1a1dad88 <d97a8f3668949a8a9d1f6202f8c53446f2d89aa7 || >=a352894d07059649398c4769dc8b645e1a1dad88 <913feef74354c653f10ecd4631df7618a95c49c2 || >=a352894d07059649398c4769dc8b645e1a1dad88 <3c1e92f75e11a11492b8cb901fceeb9f16ae6415 || >=a352894d07059649398c4769dc8b645e1a1dad88 <4efa313b15925bdd864784865d6585174979294b || >=a352894d07059649398c4769dc8b645e1a1dad88 <47b87f469a35b5ffc81c16eee6b13a9b6c8d55c6 | aa7aa8ba40c089762d821e3987aaae19e1f5705c, d479a7711f8ff127946467b910d947bd971b94ed, 9d3569bfdceda69d5ffd5148901e57b69954d9ef, d97a8f3668949a8a9d1f6202f8c53446f2d89aa7, 913feef74354c653f10ecd4631df7618a95c49c2, 3c1e92f75e11a11492b8cb901fceeb9f16ae6415, 4efa313b15925bdd864784865d6585174979294b, 47b87f469a35b5ffc81c16eee6b13a9b6c8d55c6 |
| Linux/Linuxgeneric | 2.6.27 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() spufs_mem_mmap_access() computes the local store offset as address - vma->vm_start, but bounds-checks it against vma->vm_end instead of the local store size. On 64-bit, offset is always well below vma->vm_end, so the clamp never fires and len stays unbounded against the LS_SIZE buffer returned by ctx->ops->get_ls(). Reject offsets at or beyond LS_SIZE and clamp len to the remaining space, mirroring the guard already used by spufs_mem_mmap_fault() and spufs_ps_fault().
Quoted source text, attributed separately from HOL analysis.