CVE-2026-31482

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Before commit f33f2d4c7c80 ("s390/bp: remove TIF_ISOLATE_BP"), all entry handlers loaded r12 with the current task pointer (lg %r12,__LC_CURRENT) for use by the BPENTER/BPEXIT macros. That commit removed TIF_ISOLATE_BP, dropping both the branch prediction macros and the r12 load, but did not add r12 to the register clearing sequence. Add the missing xgr %r12,%r12 to make the register scrub consistent across all entry points.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0738d395aab8fae3b5a3ad3fc640630c91693c27 patch
• https://git.kernel.org/stable/c/7f4e3233faa8470dd0627bc49b2809f2bfebd909 patch
• https://git.kernel.org/stable/c/95c899cd791803a5bf7b73e5994fbbe1cc1a9c36 patch
• https://git.kernel.org/stable/c/99a8b420f3f0e162eb9c9c9253929d4d23f9bd30 patch
• https://git.kernel.org/stable/c/a58d298a83a3a9b7ca99ded9d60a1e77231159ef patch