CVE-2026-74466
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions (custom device node used, administrative load) this value is used as an array index after bounds checking, but without speculation barrier. Add the missing array_index_nospec() call to prevent speculative execution where this domain value is used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74466
EUVD
EUVD-2026-59659

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a speculative execution vulnerability in the Linux kernel's s390/zcrypt component. It involves a user-controlled domain value extracted from an ioctl struct that could be used as an array index without proper bounds checking against speculative execution. The fix adds an array_index_nospec() call to prevent potential information leaks through speculative memory reads.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390/zcrypt component and involves speculative memory reads. Detection requires checking if your kernel version includes the fix for this issue. Use uname -a to check your kernel version and compare it against patched versions.

Impact Analysis

An attacker with local access could potentially exploit this to read sensitive kernel memory through speculative execution side channels. This could lead to information disclosure of sensitive data processed by the kernel, though exploitation requires specific conditions like custom device node usage and administrative load.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to ensure the fix for this vulnerability is included. If no update is available, consider disabling the s390/zcrypt module if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74466. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart