Описание
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Check length in pkey_pckmo handler implementation
Explicitly check the length of the target buffer in the pkey_pckmo implementation of the key_to_protkey() handler function. The handler function fails, if the generated output data exceeds the length of the provided target buffer.
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Check length in pkey_pckmo handler implementation
Explicitly check the length of the target buffer in the pkey_pckmo implementation of the key_to_protkey() handler function. The handler function fails, if the generated output data exceeds the length of the provided target buffer.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-64558
- https://git.kernel.org/stable/c/02028a24e26d85262ab9c8fc4344e1f3503007fc
- https://git.kernel.org/stable/c/1ac287e2af9a9112fe271427ef45eceb26bce8b4
- https://git.kernel.org/stable/c/433e5e70cdc1edf382d28d08a885b22e2b98b7da
- https://git.kernel.org/stable/c/614aa0491c7a190556c2345dddee0b6f5ed90989
Связанные уязвимости
A flaw was found in the Linux kernel, specifically within the s390/pkey component. This vulnerability occurs because the `pkey_pckmo` handler function does not explicitly check the length of the target buffer. If the generated output data exceeds the provided buffer's length, the handler function fails. This could allow a local attacker to cause a denial of service.
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler implementation Explicitly check the length of the target buffer in the pkey_pckmo implementation of the key_to_protkey() handler function. The handler function fails, if the generated output data exceeds the length of the provided target buffer.
In the Linux kernel, the following vulnerability has been resolved: s ...