CVE-2026-72025

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390/monwriter component where the system fails to verify if the data length remains consistent when data buffers are reused, such as for interval sample records. A malicious user could modify the data length for subsequent records, leading to an out-of-bounds user copy to the kernel buffer and subsequent memory corruption. By default, the monwriter misc device is created with root-only permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.