CVE-2026-64559

s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

State: Published
Severity: 7.8 High
Published: Jul 29, 2026
Updated: Oct 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	8fcc231ce3bea12b78bb94b280cdc03cff342435 to before 0a9e34ccbe772b8f321388cdbdf4f22b94e513e7Affected 8fcc231ce3bea12b78bb94b280cdc03cff342435 to before 693bf91d4db134f9b1c2840c8e287eee3d993bacAffected 8fcc231ce3bea12b78bb94b280cdc03cff342435 to before 7e7e03848c918aa0acad5ffd75d929e3afec1554Affected 8fcc231ce3bea12b78bb94b280cdc03cff342435 to before b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970Affected
LinuxLinux	6.12Affected before 6.12Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.