Описание
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl
Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size.
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl
Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-64559
- https://git.kernel.org/stable/c/0a9e34ccbe772b8f321388cdbdf4f22b94e513e7
- https://git.kernel.org/stable/c/693bf91d4db134f9b1c2840c8e287eee3d993bac
- https://git.kernel.org/stable/c/7e7e03848c918aa0acad5ffd75d929e3afec1554
- https://git.kernel.org/stable/c/b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970
Связанные уязвимости
A flaw was found in the Linux kernel. A missing buffer length check in the `PKEY_VERIFYPROTK ioctl` within the `s390/pkey` module allows a local attacker to provide a buffer length request that exceeds the allocated buffer size. This could lead to information disclosure by reading out-of-bounds memory or a denial of service by crashing the system.
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size.
In the Linux kernel, the following vulnerability has been resolved: s ...