Riskcovery

CVE-2026-74466

s390/zcrypt: Close speculative mem read possibility

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Oct 30, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/zcrypt: Close speculative mem read possibility

The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier.

Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cfd68b33094e1a92249850ff3c3c92ae9112a541 to before 55ac533c568a5dcaa41cd26d6e089f9dff2a7c22Affected
  • cfd68b33094e1a92249850ff3c3c92ae9112a541 to before dd1a334523ba533cba63caf593a7329d8e0e5e6eAffected
  • cfd68b33094e1a92249850ff3c3c92ae9112a541 to before d11a260bd7dfc6f6ccd43e1b930050f24e70cd5fAffected
  • cfd68b33094e1a92249850ff3c3c92ae9112a541 to before 59adeedebf02aa1c203de1d2b67ec45bfab7a3c6Affected
  • cfd68b33094e1a92249850ff3c3c92ae9112a541 to before 82b62eda68abfb7a33ac40f24b8c4128c2891148Affected
  • cfd68b33094e1a92249850ff3c3c92ae9112a541 to before e935cd525af4c6ed2e2c6404aa27ca19c7f39ddbAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.