CVE-2026-46250— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于MIPS架构中LLVM编译器在gp用作全局寄存器变量时错误恢复被修改的gp值，导致内核重定位后访问未重定位内核，可能造成早期崩溃。
可能的 ATT&CK 技术 1 AI
T1496 · Resource Hijacking影响版本矩阵 18
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 279b991b24d2439fbe9d2f093988b9c8aed2603d< 05bff9b0ae095b2420cfebb4a96759a09334bec6 |
affected |
279b991b24d2439fbe9d2f093988b9c8aed2603d< 1fe3b402b1e97a1718df3be0a1d3eee20133e735 |
affected | ||
279b991b24d2439fbe9d2f093988b9c8aed2603d< 4dc65b40fb80c2020efbf139b9a38d30f9a37b92 |
affected | ||
279b991b24d2439fbe9d2f093988b9c8aed2603d< c0155dee51b9f5f48aaf5c71cae005eb0e36521f |
affected | ||
279b991b24d2439fbe9d2f093988b9c8aed2603d< e3a6498a63394218561065a9a7a597a204f52f6a |
affected | ||
279b991b24d2439fbe9d2f093988b9c8aed2603d< 561834f6d6f52b8a1791331e94b2aac753491d2a |
affected | ||
279b991b24d2439fbe9d2f093988b9c8aed2603d< 9bc3b0ae5203aba650297fdf3e1e774125e423f2 |
affected | ||
279b991b24d2439fbe9d2f093988b9c8aed2603d< 30bfc2d6a1132a89a5f1c3b96c59cf3e4d076ea3 |
affected | ||
| … +10 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-46250 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
MIPS: Work around LLVM bug when gp is used as global register variable
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
MIPS: Work around LLVM bug when gp is used as global register variable
On MIPS, __current_thread_info is defined as global register variable
locating in $gp, and is simply assigned with new address during kernel
relocation.
This however is broken with LLVM, which always restores $gp if it finds
$gp is clobbered in any form, including when intentionally through a
global register variable. This is against GCC's documentation[1], which
requires a callee-saved register used as global register variable not to
be restored if it's clobbered.
As a result, $gp will continue to point to the unrelocated kernel after
the epilog of relocate_kernel(), leading to an early crash in init_idle,
[ 0.000000] CPU 0 Unable to handle kernel paging request at virtual address 0000000000000000, epc == ffffffff81afada8, ra == ffffffff81afad90
[ 0.000000] Oops[#1]:
[ 0.000000] CPU: 0 UID: 0 PID: 0 Comm: swapper Tainted: G W 6.19.0-rc5-00262-gd3eeb99bbc99-dirty #188 VOLUNTARY
[ 0.000000] Tainted: [W]=WARN
[ 0.000000] Hardware name: loongson,loongson64v-4core-virtio
[ 0.000000] $ 0 : 0000000000000000 0000000000000000 0000000000000001 0000000000000000
[ 0.000000] $ 4 : ffffffff80b80ec0 ffffffff80b53d48 0000000000000000 00000000000f4240
[ 0.000000] $ 8 : 0000000000000100 ffffffff81d82f80 ffffffff81d82f80 0000000000000001
[ 0.000000] $12 : 0000000000000000 ffffffff81776f58 00000000000005da 0000000000000002
[ 0.000000] $16 : ffffffff80b80e40 0000000000000000 ffffffff80b81614 9800000005dfbe80
[ 0.000000] $20 : 00000000540000e0 ffffffff81980000 0000000000000000 ffffffff80f81c80
[ 0.000000] $24 : 0000000000000a26 ffffffff8114fb90
[ 0.000000] $28 : ffffffff80b50000 ffffffff80b53d40 0000000000000000 ffffffff81afad90
[ 0.000000] Hi : 0000000000000000
[ 0.000000] Lo : 0000000000000000
[ 0.000000] epc : ffffffff81afada8 init_idle+0x130/0x270
[ 0.000000] ra : ffffffff81afad90 init_idle+0x118/0x270
[ 0.000000] Status: 540000e2 KX SX UX KERNEL EXL
[ 0.000000] Cause : 00000008 (ExcCode 02)
[ 0.000000] BadVA : 0000000000000000
[ 0.000000] PrId : 00006305 (ICT Loongson-3)
[ 0.000000] Process swapper (pid: 0, threadinfo=(____ptrval____), task=(____ptrval____), tls=0000000000000000)
[ 0.000000] Stack : 9800000005dfbf00 ffffffff8178e950 0000000000000000 0000000000000000
[ 0.000000] 0000000000000000 ffffffff81970000 000000000000003f ffffffff810a6528
[ 0.000000] 0000000000000001 9800000005dfbe80 9800000005dfbf00 ffffffff81980000
[ 0.000000] ffffffff810a6450 ffffffff81afb6c0 0000000000000000 ffffffff810a2258
[ 0.000000] ffffffff81d82ec8 ffffffff8198d010 ffffffff81b67e80 ffffffff8197dd98
[ 0.000000] ffffffff81d81c80 ffffffff81930000 0000000000000040 0000000000000000
[ 0.000000] 0000000000000000 0000000000000000 0000000000000000 0000000000000000
[ 0.000000] 0000000000000000 000000000000009e ffffffff9fc01000 0000000000000000
[ 0.000000] 0000000000000000 0000000000000000 0000000000000000 0000000000000000
[ 0.000000] 0000000000000000 ffffffff81ae86dc ffffffff81b3c741 0000000000000002
[ 0.000000] ...
[ 0.000000] Call Trace:
[ 0.000000] [<ffffffff81afada8>] init_idle+0x130/0x270
[ 0.000000] [<ffffffff81afb6c0>] sched_init+0x5c8/0x6c0
[ 0.000000] [<ffffffff81ae86dc>] start_kernel+0x27c/0x7a8
This bug has been reported to LLVM[2] and affects version from (at
least) 18 to 21. Let's work around this by using inline assembly to
assign $gp before a fix is widely available.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于MIPS架构中LLVM编译器在gp用作全局寄存器变量时错误恢复被修改的gp值，导致内核重定位后访问未重定位内核，可能造成早期崩溃。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2026-46250 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-46250 的情报信息
请登录查看更多情报信息。
CVE-2026-46250 补丁与修复 (7)
同批安全公告 · Linux · 2026-06-03 · 共 32 条
| CVE-2026-46244 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-46266 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-46264 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46273 | 8.6 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46251 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46270 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46253 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46259 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46260 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46263 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46271 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46265 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-46246 | Linux kernel 安全漏洞 | |
| CVE-2026-46247 | Linux kernel 安全漏洞 | |
| CVE-2026-46245 | Linux kernel 安全漏洞 | |
| CVE-2025-71314 | Linux kernel 安全漏洞 | |
| CVE-2025-71313 | Linux kernel 安全漏洞 | |
| CVE-2026-46248 | Linux kernel 安全漏洞 | |
| CVE-2026-46249 | Linux kernel 安全漏洞 | |
| CVE-2026-46252 | Linux kernel 安全漏洞 |
显示前 20 条，共 32 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-46250
暂无评论