Description
In the Linux kernel, the following vulnerability has been resolved:

s390: Revert support for DCACHE_WORD_ACCESS

load_unaligned_zeropad() reads eight bytes from unaligned addresses and may
cross page boundaries. It handles exceptions which may happen if reading
from the second page results in an exception.

For pages which are donated to the Ultravisor for secure execution purposes
the do_secure_storage_access() exception handler however does not handle
such exceptions correctly. Such an exception may result in an endless
exception loop which will never be resolved.

An attempt to fix this [1] turned out to be not sufficient. For now revert
load_unaligned_zeropad() until this problem has been resolved in a proper
way.

Note that the implementation of load_unaligned_zeropad() itself is
correct. The revert is just a temporary workaround until there is complete
fix for secure storage access exceptions.

[1] commit b00be77302d7 ("s390/mm: Add missing secure storage access fixups for donated memory")
Published: 2026-07-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw involves the load_unaligned_zeropad() routine in the Linux kernel for s390 architecture. When an unaligned eight‑byte read crosses a page boundary, the routine may generate a secure storage access exception. The exception handler for donated secure‑storage pages fails to recover from such a case, triggering an endless loop of repeated exceptions that never resolves. The result is a kernel‑level denial of service where the system can become unresponsive or crash. The weakness corresponds to an improper handling of exceptional conditions that can lead to uncontrolled resource consumption.

Affected Systems

Vendors: Linux (kernel). All kernel releases that include the load_unaligned_zeropad() function on s390 architecture are affected. No specific version information is provided, so any kernel that has not yet incorporated the revert and proper fix is potentially impacted.

Risk and Exploitability

The CVSS score is 5.5, indicating moderate severity, while the EPSS score of less than 1% suggests a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, indicating it has not been widely exploited. Attackers would need a privilege level that allows them to trigger the secure storage access exception, such as kernel or privileged user mode. Based on the description, it is inferred that the likely attack vector is a local privilege escalation or a malicious kernel module, as the defect resides in kernel memory‑access handling.

Generated by OpenCVE AI on August 2, 2026 at 13:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check for and apply kernel updates that include the revert of load_unaligned_zeropad() and the full secure‑storage fix once they are released by the Linux kernel maintainers.
  • If no update is available, monitor kernel logs for repeated secure‑storage exceptions and consider stopping processes that may trigger the unaligned read across page boundaries.
  • In the interim, a temporary patch can be applied by manually reverting the load_unaligned_zeropad() function as described in the kernel commit history, or by applying the existing revert commit until a complete fix is deployed.

Generated by OpenCVE AI on August 2, 2026 at 13:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4724-1 linux-6.12 new package
Debian DSA Debian DSA DSA-6405-1 linux security update
History

Sat, 01 Aug 2026 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Wed, 29 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-835
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Sun, 26 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHE_WORD_ACCESS load_unaligned_zeropad() reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an exception. For pages which are donated to the Ultravisor for secure execution purposes the do_secure_storage_access() exception handler however does not handle such exceptions correctly. Such an exception may result in an endless exception loop which will never be resolved. An attempt to fix this [1] turned out to be not sufficient. For now revert load_unaligned_zeropad() until this problem has been resolved in a proper way. Note that the implementation of load_unaligned_zeropad() itself is correct. The revert is just a temporary workaround until there is complete fix for secure storage access exceptions. [1] commit b00be77302d7 ("s390/mm: Add missing secure storage access fixups for donated memory")
Title s390: Revert support for DCACHE_WORD_ACCESS
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:50:22.543Z

Reserved: 2026-07-19T15:36:31.783Z

Link: CVE-2026-64369

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-07-25T10:17:19.743

Modified: 2026-08-11T15:01:50.637

Link: CVE-2026-64369

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64369 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-02T13:15:03Z

Weaknesses
  • CWE-835

    Loop with Unreachable Exit Condition ('Infinite Loop')