SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72011

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the s390 architecture, where user-controlled input can lead to improper array access due to a missing array_index_nospec() call in the memtop_get_page_count() function. This oversight may allow attackers to exploit speculative execution, potentially leading to unauthorized information disclosure. Organizations using Linux on s390 systems should prioritize patching this vulnerability to mitigate the risk of data leakage.

CVE
CVE-2026-72011
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() 'level' is user space controlled and used to read from an array. Add the missing array_index_nospec() call to prevent speculative execution.