🟡 Medium | Source: Microsoft Security Response Center
CVE-2026-64082 addresses a register corruption vulnerability in the Linux kernel’s RISC-V architecture support, caused by uninitialised control registers (cregs) when an error condition occurs. This type of flaw can lead to unpredictable system behaviour or potentially be leveraged to expose sensitive data held in registers. The fix ensures registers are properly initialised before use, closing a low-level but meaningful security gap.
Security Architect’s Take: If you are running Azure workloads on Linux VMs or container hosts with RISC-V kernel components, verify that your underlying host images have received the patched kernel. For most Azure-managed services, monitor Microsoft’s patch rollout and ensure auto-update policies are active for any self-managed Linux infrastructure.
Original advisory: CVE-2026-64082 riscv: Fix register corruption from uninitialized cregs on error