CVE-2026-74466

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/zcrypt: Close speculative mem read possibility<br /> <br /> The domain value is extracted from a given CCA or EP11 ioctl struct<br /> when a CPRB is about to be sent. Thus this is a user controlled value.<br /> Under some special conditions (custom device node used, administrative<br /> load) this value is used as an array index after bounds checking, but<br /> without speculation barrier.<br /> <br /> Add the missing array_index_nospec() call to prevent speculative<br /> execution where this domain value is used.