Linux Kernel Arm64 Compatibility Syscall Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's handling of compatibility system calls for arm64 processes has been addressed. When a compatibility process attempts to execute an unknown system call above the __ARM_NR_COMPAT_END threshold, the kernel responds by sending a SIGILL signal to the process. However, the error reporting mechanism inadvertently misinterprets the syscall number as an exception syndrome value, leading to the display of incorrect error messages. This issue arises because the compatibility syscall handler does not properly validate syscall numbers, allowing invalid values to be processed incorrectly. The vulnerability could be exploited by a compatibility process that sends a syscall number interpreted as negative, bypassing normal error handling and causing the kernel to print misleading exception information.

Impact

Exploitation of this vulnerability could result in the kernel providing false error reports about system call exceptions, potentially misleading developers or system administrators.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.