vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-72236

s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

N/A
Published: August 15, 2026 at 05:54 AM UTC
Updated: August 23, 2026 at 01:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() ev variable is userspace controlled via event->attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing array_index_nospec() call to prevent speculative execution.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
3.4 ≤ v < 6.1.1843.4 ≤ v < 6.12.973.4 ≤ v < 6.18.403.4 ≤ v < 6.6.1453.4 ≤ v < 7.1.53.4 ≤ v < 7.2212188a596d17d519842ef2173150315735b54e13.4
Vendor states this is fixed in 27206bb57c47bdbe33bccc78fa7f7e2a719a06b9 (fixed)
Vendor states this is fixed in 49145bce539117db4b6e9e83c0e5ef528e361050 (fixed)
Vendor states this is fixed in 4c249b214c686f9a1c4cf4f32893b59b189e897a (fixed)
Vendor states this is fixed in a21f3615c88421df81060b6ff89220fd34094c4d (fixed)
Vendor states this is fixed in f79dff8c721bbb1f3fc312ea55e0551c2cc28801 (fixed)
Vendor states this is fixed in fa1ebae4206e6afc8caa642e9eb1bbe39a9a724f (fixed)
Vendor states this is fixed in 3.4 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (6)

Source: cverecord
https://git.kernel.org/stable/c/27206bb57c47bdbe33bccc78fa7f7e2a719a06b9
Source: cverecord
https://git.kernel.org/stable/c/a21f3615c88421df81060b6ff89220fd34094c4d
Source: cverecord
https://git.kernel.org/stable/c/fa1ebae4206e6afc8caa642e9eb1bbe39a9a724f
Source: cverecord
https://git.kernel.org/stable/c/f79dff8c721bbb1f3fc312ea55e0551c2cc28801
Source: cverecord
https://git.kernel.org/stable/c/49145bce539117db4b6e9e83c0e5ef528e361050
Source: cverecord
https://git.kernel.org/stable/c/4c249b214c686f9a1c4cf4f32893b59b189e897a

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card