Bug 2507034 (CVE-2026-64369) - CVE-2026-64369 kernel: s390: Revert support for DCACHE_WORD_ACCESS
Summary: CVE-2026-64369 kernel: s390: Revert support for DCACHE_WORD_ACCESS
Keywords:
Status: NEW
Alias: CVE-2026-64369
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-25 10:01 UTC by OSIDB Bzimport
Modified: 2026-07-28 15:57 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-25 10:01:35 UTC
In the Linux kernel, the following vulnerability has been resolved:

s390: Revert support for DCACHE_WORD_ACCESS

load_unaligned_zeropad() reads eight bytes from unaligned addresses and may
cross page boundaries. It handles exceptions which may happen if reading
from the second page results in an exception.

For pages which are donated to the Ultravisor for secure execution purposes
the do_secure_storage_access() exception handler however does not handle
such exceptions correctly. Such an exception may result in an endless
exception loop which will never be resolved.

An attempt to fix this [1] turned out to be not sufficient. For now revert
load_unaligned_zeropad() until this problem has been resolved in a proper
way.

Note that the implementation of load_unaligned_zeropad() itself is
correct. The revert is just a temporary workaround until there is complete
fix for secure storage access exceptions.

[1] commit b00be77302d7 ("s390/mm: Add missing secure storage access fixups for donated memory")

Comment 1 Mauro Matteo Cascella 2026-07-28 15:54:21 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026072522-CVE-2026-64369-84f6@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.