CVE-2026-74466
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/08/2026
Última modificación:
15/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
s390/zcrypt: Close speculative mem read possibility<br />
<br />
The domain value is extracted from a given CCA or EP11 ioctl struct<br />
when a CPRB is about to be sent. Thus this is a user controlled value.<br />
Under some special conditions (custom device node used, administrative<br />
load) this value is used as an array index after bounds checking, but<br />
without speculation barrier.<br />
<br />
Add the missing array_index_nospec() call to prevent speculative<br />
execution where this domain value is used.



