Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-74466

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/08/2026
Última modificación:
15/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/zcrypt: Close speculative mem read possibility<br /> <br /> The domain value is extracted from a given CCA or EP11 ioctl struct<br /> when a CPRB is about to be sent. Thus this is a user controlled value.<br /> Under some special conditions (custom device node used, administrative<br /> load) this value is used as an array index after bounds checking, but<br /> without speculation barrier.<br /> <br /> Add the missing array_index_nospec() call to prevent speculative<br /> execution where this domain value is used.

Impacto