CVE-2026-64369CWE-835

CVE-2026-64369

Medium · published July 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390: Revert support for DCACHE_WORD_ACCESS

load_unaligned_zeropad() reads eight bytes from unaligned addresses and may

cross page boundaries. It handles exceptions which may happen if reading

from the second page results in an exception.

For pages which are donated to the Ultravisor for secure execution purposes

the do_secure_storage_access() exception handler however does not handle

such exceptions correctly. Such an exception may result in an endless

exception loop which will never be resolved.

An attempt to fix this [1] turned out to be not sufficient. For now revert

load_unaligned_zeropad() until this problem has been resolved in a proper

way.

Note that the implementation of load_unaligned_zeropad() itself is

correct. The revert is just a temporary workaround until there is complete

fix for secure storage access exceptions.

[1] commit b00be77302d7 ("s390/mm: Add missing secure storage access fixups for donated memory")

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.3th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-07-25T14:17Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.12.976.12.97
linux/linux_kernel≥ 6.13, < 6.18.396.18.39
linux/linux_kernel≥ 6.19, < 7.1.47.1.4
References (4)
EPSS history
Timeline
  • 25 JUL 08:50Z
    s390: Revert support for DCACHE_WORD_ACCESS
    cvelistv5