CVE-2026-74466

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390/zcrypt component where a user-controlled domain value is extracted from a CCA or EP11 ioctl struct during the preparation of a CPRB. Under specific conditions, such as the use of a custom device node and administrative load, this value is used as an array index. Although bounds checking is performed, the absence of a speculation barrier allows for a speculative memory read. This is addressed by implementing the array index nospec() function to prevent speculative execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.