CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel affects the s390 architecture, where a user-controlled variable can be used as an array index without proper speculation barriers, potentially leading to speculative execution attacks. This flaw could allow an attacker to exploit the kernel's performance event handling, potentially compromising system integrity. Organizations using Linux on s390 systems should prioritize applying the patch to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() ev variable is userspace controlled via event->attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing array_index_nospec() call to prevent speculative execution.