Vulnerability in Linux

CVE-2026-64558

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler implementation Explicitly check the length of the target buffer in the pkey_pckmo implementation of the key_to_protkey() handler function. The handler function fails, if the generated output data exceeds the length of the provided target buffer.

EPSS: 0.001 (2.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 7.2-rc1, 6.12, 7.2

References

Frequently asked questions

What is CVE-2026-64558?
CVE-2026-64558 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-07-29.
How severe is CVE-2026-64558?
High severity. CVSS v3 base score is 7.8 out of 10.