PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-64558

CVE-2026-64558

kernel: s390/pkey: Check length in pkey_pckmo handler implementation

Loading…

Severity

Important

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · July 29, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel, specifically within the s390/pkey component. This vulnerability occurs because the pkey_pckmo handler function does not explicitly check the length of the target buffer. If the generated output data exceeds the provided buffer's length, the handler function fails. This could allow a local attacker to cause a denial of service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 · Out-of-bounds Write