7.8

CVE-2026-64559

s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

Explicitly check the buffer length request structure provided by
user-space and fail, if it exceeds the buffer size.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8fcc231ce3bea12b78bb94b280cdc03cff342435
Version < 0a9e34ccbe772b8f321388cdbdf4f22b94e513e7
Status affected
Version 8fcc231ce3bea12b78bb94b280cdc03cff342435
Version < 693bf91d4db134f9b1c2840c8e287eee3d993bac
Status affected
Version 8fcc231ce3bea12b78bb94b280cdc03cff342435
Version < 7e7e03848c918aa0acad5ffd75d929e3afec1554
Status affected
Version 8fcc231ce3bea12b78bb94b280cdc03cff342435
Version < b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.021
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0a9e34ccbe772b8f321388cdbdf4f22b94e513e7
https://git.kernel.org/stable/c/693bf91d4db134f9b1c2840c8e287eee3d993bac
https://git.kernel.org/stable/c/7e7e03848c918aa0acad5ffd75d929e3afec1554
https://git.kernel.org/stable/c/b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970