CVE-2026-64369 Details
Description
In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad() reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an exception. For pages which are donated to the Ultravisor for secure execution purposes the do_secure_storage_access() exception handler however does not handle such exceptions correctly. Such an exception may result in an endless exception loop which will never be resolved. An attempt to fix this [1] turned out to be not sufficient. For now revert load_unaligned_zeropad() until this problem has been resolved in a proper way. Note that the implementation of load_unaligned_zeropad() itself is correct. The revert is just a temporary workaround until there is complete fix for secure storage access exceptions. [1] commit b00be77302d7 ("s390/mm: Add missing secure storage access fixups for donated memory")
A vulnerability has been identified in the Linux kernel's s390 architecture related to the handling of unaligned memory accesses. The issue arises in the 'load_unaligned_zeropad()' function, which reads eight bytes from unaligned addresses and may cross page boundaries. While the function correctly manages exceptions for most pages, it fails to do so for pages donated to the Ultravisor for secure execution. This oversight can lead to an endless exception loop, causing a system hang. Although an initial fix was attempted, it proved insufficient, necessitating a temporary rollback of the problematic function until a proper solution is implemented.
Users can apply the latest patches from the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/37540b8c287fc817bdbd0c62bb75ad6eab0e5d03 | kernel.org | Patch |
| https://git.kernel.org/stable/c/be79d285bea70d0edd5015bd487311bfa8cbebc9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c94806905e02cc8e17a69c822d93c41743b7ffc5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c9e0f1517631ac08987f8385817119bccf2f1f12 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.7, < 6.12.97 >= 6.13, < 6.18.39 >= 6.19, < 7.1.4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 8, 2026 | Initial Analysis | [email protected] |
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |