What is CVE-2026-9771?
CVE-2026-9771 relates to improper validation in the flash_copy() system call handler when CONFIG_USERSPACE is enabled. The handler only validated the output buffer, potentially allowing exploitation of the kernel-side trust boundary from user-mode callers. A security patch should be applied to address this issue.
Azərbaycanca: CVE-2026-9771, CONFIG_USERSPACE aktiv olduqda flash_copy() sistem çağırışının düzgün yoxlanılmaması ilə bağlıdır. Bu zəiflik yalnız çıxış buferini təsdiqlədiyi üçün istifadəçi rejimindən kernel səviyyəsinə keçiddə istismara yol aça bilər. Təhlükəsizlik yaması tətbiq edilməlidir.
Related CVEs
link basis: same weakness class CWE-20
FAQ2
Under what condition is CVE-2026-9771 exploitable?
This vulnerability is exploitable when CONFIG_USERSPACE is enabled.
What is the root cause of CVE-2026-9771?
The flash_copy() system call handler only validated the output buffer, leading to improper validation of the kernel-side trust boundary from user-mode callers.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.