PT-2026-65849

CVE-2026-64559

·

Published

2026-07-29

·

Updated

2026-11-11

Description by

CVSS 4.0
8.5
High
MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the s390/pkey component where the PKEY VERIFYPROTK ioctl does not properly validate the length of the request structure provided by user-space. This can lead to a failure to detect when the request exceeds the allocated buffer size.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2026-64559
OPENSUSE-SU-2026:11476-1
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:4120-1
SUSE-SU-2026:4254-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-9003-1
USN-9021-1
USN-9043-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com