Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-31568

Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-125 Lectura fuera de límites
Fecha de publicación:
24/04/2026
Última modificación:
27/04/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/mm: Add missing secure storage access fixups for donated memory<br /> <br /> There are special cases where secure storage access exceptions happen<br /> in a kernel context for pages that don&amp;#39;t have the PG_arch_1 bit<br /> set. That bit is set for non-exported guest secure storage (memory)<br /> but is absent on storage donated to the Ultravisor since the kernel<br /> isn&amp;#39;t allowed to export donated pages.<br /> <br /> Prior to this patch we would try to export the page by calling<br /> arch_make_folio_accessible() which would instantly return since the<br /> arch bit is absent signifying that the page was already exported and<br /> no further action is necessary. This leads to secure storage access<br /> exception loops which can never be resolved.<br /> <br /> With this patch we unconditionally try to export and if that fails we<br /> fixup.

Productos y versiones vulnerables

CPE Desde Hasta
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.7.1 (incluyendo) 6.18.21 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (incluyendo) 6.19.11 (excluyendo)
cpe:2.3:o:linux:linux_kernel:5.7:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*