CVE-2026-72236
2026-08-15
06h21 +00:00
06h21 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
In the Linux kernel, the following vulnerability has been resolved:
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
ev variable is userspace controlled via event->attr.config and used
as an array index after bounds checking, but without speculation
barriers.
Add the missing array_index_nospec() call to prevent speculative
execution.
