Linux Kernel CVE-2026-64214

Exploitation requires a system running Linux on PowerPC (ppc64) architecture - x86, ARM, and all other architectures are unaffected. The specific triggering condition is a machine check exception (MCE) occurring while the CPU is executing in real mode (MSR[DR]=0, virtual memory translation disabled), which is a specific kernel internal execution context during early MCE handling via machine_check_early_common() and machine_check_queue_event(). This is not a condition a typical unprivileged userspace process can directly induce; it depends on hardware events (memory errors, bus faults, or specific hardware fault conditions) or kernel-level code paths. The CVSS PR:L rating implies low-privilege sufficiency, but no mechanism for an unprivileged user to reliably trigger an MCE in real mode has been documented. The vulnerability results exclusively in a kernel panic (denial of service) - there is no code execution or privilege escalation impact. Systems not experiencing machine check exceptions in real mode are not at risk of hitting this code path.

The CVSS score of 5.5 with AV:L/PR:L understates the practical access barrier: realistically inducing a machine check exception during real-mode kernel execution on PowerPC is not a low-complexity operation for an unprivileged user, as it depends on hardware events or kernel-level code paths, not ordinary userspace inputs. EPSS at 0.17% (7th percentile) reinforces that no exploitation tooling is known and the probability of active exploitation is extremely low. The vulnerability is absent from the CISA KEV catalog and no POC has been identified. The impact is exclusively availability - a kernel panic causing a complete system crash - with no confidentiality or integrity component. Even a mid-sized municipal IT team in olsztyn running PowerPC-based infrastructure would treat this as a standard patch-cycle priority rather than an emergency response item, given the architecture-specific scope and absence of any exploitation activity. The CVSS availability impact of High is accurate for affected PowerPC systems, but the combination of architectural specificity, low EPSS, and absence of public exploit code places the aggregate real-world risk materially below what the raw 5.5 base score implies.

On a PowerPC server or embedded system running an unpatched Linux kernel, a machine check exception occurring during real-mode kernel execution - caused by a hardware error, memory fault, or specific hardware condition - causes machine_check_queue_event() to call arch_irq_work_raise(), which attempts to read preempt_count through a virtual address while the MMU is off, triggering a kernel data bad area fault at the virtual address and crashing the system with a kernel panic. No public proof-of-concept exploit code exists, and triggering this reproducibly requires either genuine hardware-induced MCEs or kernel-level access to construct the triggering execution context.