Spectre Variant in Linux s390 Syscall Dispatch Table

Executive Summary

This vulnerability exists in the Linux kernel's s390 architecture syscall dispatch table. The syscall number, which is controlled directly by userspace, lacks a proper boundary check called array_index_nospec(). This missing boundary allows potential access beyond the intended syscall function pointer tables, which could lead to unintended behavior or exploitation.

Useful 0 Not Useful 0

Impact Analysis

Because the syscall number is directly controlled by userspace without proper boundary checks, an attacker could potentially exploit this to access or execute unintended syscall functions. This could lead to security issues such as unauthorized code execution or information leakage within the Linux kernel on s390 systems.

Useful 0 Not Useful 0