CVE-2026-64558

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-64558
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64558.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64558
Downstream
Related
Published
2026-07-29T16:31:21.591Z
Modified
2026-08-12T03:51:21.391230691Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
s390/pkey: Check length in pkey_pckmo handler implementation
Details

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Check length in pkey_pckmo handler implementation

Explicitly check the length of the target buffer in the pkeypckmo implementation of the keyto_protkey() handler function. The handler function fails, if the generated output data exceeds the length of the provided target buffer.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64558.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8fcc231ce3bea12b78bb94b280cdc03cff342435
Fixed
02028a24e26d85262ab9c8fc4344e1f3503007fc
Fixed
433e5e70cdc1edf382d28d08a885b22e2b98b7da
Fixed
614aa0491c7a190556c2345dddee0b6f5ed90989
Fixed
1ac287e2af9a9112fe271427ef45eceb26bce8b4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64558.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64558.json"