What’s Vulnerable › Vulnerabilities

CVE-2026-64559: s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-29 · updated 2026-10-19
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size.

Affected products

• Linux kernel: 6.12 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a9e34ccbe772b8f321388cdbdf4f22b94e513e7
• https://git.kernel.org/stable/c/693bf91d4db134f9b1c2840c8e287eee3d993bac
• https://git.kernel.org/stable/c/7e7e03848c918aa0acad5ffd75d929e3afec1554
• https://git.kernel.org/stable/c/b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970

Get alerted when CVE-2026-64559 or the next vulnerability affects your stack