CVE-2026-72236

s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 23, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

ev variable is userspace controlled via event->attr.config and used as an array index after bounds checking, but without speculation barriers.

Add the missing array_index_nospec() call to prevent speculative execution.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	212188a596d17d519842ef2173150315735b54e1 to before 4c249b214c686f9a1c4cf4f32893b59b189e897aAffected 212188a596d17d519842ef2173150315735b54e1 to before 27206bb57c47bdbe33bccc78fa7f7e2a719a06b9Affected 212188a596d17d519842ef2173150315735b54e1 to before a21f3615c88421df81060b6ff89220fd34094c4dAffected 212188a596d17d519842ef2173150315735b54e1 to before fa1ebae4206e6afc8caa642e9eb1bbe39a9a724fAffected 212188a596d17d519842ef2173150315735b54e1 to before f79dff8c721bbb1f3fc312ea55e0551c2cc28801Affected 212188a596d17d519842ef2173150315735b54e1 to before 49145bce539117db4b6e9e83c0e5ef528e361050Affected
LinuxLinux	3.4Affected before 3.4Not affected 6.1.184 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

212188a596d17d519842ef2173150315735b54e1 to before 4c249b214c686f9a1c4cf4f32893b59b189e897aAffected
212188a596d17d519842ef2173150315735b54e1 to before 27206bb57c47bdbe33bccc78fa7f7e2a719a06b9Affected
212188a596d17d519842ef2173150315735b54e1 to before a21f3615c88421df81060b6ff89220fd34094c4dAffected
212188a596d17d519842ef2173150315735b54e1 to before fa1ebae4206e6afc8caa642e9eb1bbe39a9a724fAffected
212188a596d17d519842ef2173150315735b54e1 to before f79dff8c721bbb1f3fc312ea55e0551c2cc28801Affected
212188a596d17d519842ef2173150315735b54e1 to before 49145bce539117db4b6e9e83c0e5ef528e361050Affected

LinuxLinux

3.4Affected
before 3.4Not affected
6.1.184 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.