{"id":6808,"date":"2026-09-04T18:49:18","date_gmt":"2026-09-04T10:49:18","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-72154"},"modified":"2026-09-04T18:49:18","modified_gmt":"2026-09-04T10:49:18","slug":"cve-2026-72154","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-72154","title":{"rendered":"CVE-2026-72154 [HIGH] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nopenrisc: Fix jump_la"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>openrisc: Fix jump_label smp syncing<\/p>\n<p>The original commit 8c30b0018f9d (&#8220;openrisc: Add jump label support&#8221;)<br \/>\ncopies from arm64 and does not properly consider how icache invalidation<br \/>\non remote cores works in OpenRISC.  On OpenRISC remote icaches need to<br \/>\nbe invalidated otherwise static key&#8217;s may remain state after updating.<\/p>\n<p>Fix SMP cache syncing by:<\/p>\n<p> 1. Properly invalidate remote core icaches on SMP systems by using<br \/>\n    icache_all_inv.  The old code uses kick_all_cpus_sync() which runs a<br \/>\n    no-op IPI function call on remote CPU&#8217;s which does execute a lot of<br \/>\n    code and flushes many cache lines in the process, but does not flush<br \/>\n    all and it&#8217;s not correct on OpenRISC.<br \/>\n 2. For architectures that do not have WRITETHROUGH caches be sure<br \/>\n    to flush the dcache after patching.<\/p>\n<p>To test this I first reproduced the issue using a custom test module<br \/>\n[0].  The test confirmed that some icache lines maintained stale<br \/>\nstatic_key code sequences after calling static_branch_enable().  After<br \/>\nthis patch there are no longer jump_label coherency issues.<\/p>\n<p>[0] https:\/\/github.com\/stffrdhrn\/or1k-utils\/tree\/master\/tests\/smp_static_key_test<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>openrisc: Fix jump_label smp syncing<\/p>\n<p>The original commit 8c30b0018f9d (&#8220;openrisc: Add jump label support&#8221;)<br \/>\ncopies from arm64 and d<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-6808","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/6808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}