In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()… (CVE-2026-72011)
A vulnerability in the Linux kernel s390 architecture was resolved by adding a missing array_index_nospec() call to the memtop_get_page_count() function. The issue involved a user-controlled 'level' value used to index an array without proper speculative execution mitigation, which could potentially lead to speculative execution side-channel attacks. The vulnerability has been fixed by adding the missing call to prevent such speculative execution issues.
AI Analysis
Technical Summary
The Linux kernel s390/diag subsystem contained a vulnerability where the 'level' parameter, controlled by user space, was used to read from an array without the necessary array_index_nospec() call. This omission could allow speculative execution to access out-of-bounds memory, potentially leaking sensitive information. The vulnerability was resolved by adding the missing array_index_nospec() call to the memtop_get_page_count() function, mitigating speculative execution risks.
Potential Impact
The vulnerability could allow speculative execution side-channel attacks due to improper bounds checking on a user-controlled index. This might lead to information disclosure through speculative execution. However, no known exploits are reported in the wild, and the issue is limited to the s390 architecture in the Linux kernel.
Mitigation Recommendations
A fix has been implemented by adding the missing array_index_nospec() call in the Linux kernel source code. Users should update their Linux kernel to a version that includes this patch once it is released. Patch status is not yet confirmed in the provided data — check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()… (CVE-2026-72011)
Description
A vulnerability in the Linux kernel s390 architecture was resolved by adding a missing array_index_nospec() call to the memtop_get_page_count() function. The issue involved a user-controlled 'level' value used to index an array without proper speculative execution mitigation, which could potentially lead to speculative execution side-channel attacks. The vulnerability has been fixed by adding the missing call to prevent such speculative execution issues.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel s390/diag subsystem contained a vulnerability where the 'level' parameter, controlled by user space, was used to read from an array without the necessary array_index_nospec() call. This omission could allow speculative execution to access out-of-bounds memory, potentially leaking sensitive information. The vulnerability was resolved by adding the missing array_index_nospec() call to the memtop_get_page_count() function, mitigating speculative execution risks.
Potential Impact
The vulnerability could allow speculative execution side-channel attacks due to improper bounds checking on a user-controlled index. This might lead to information disclosure through speculative execution. However, no known exploits are reported in the wild, and the issue is limited to the s390 architecture in the Linux kernel.
Mitigation Recommendations
A fix has been implemented by adding the missing array_index_nospec() call in the Linux kernel source code. Users should update their Linux kernel to a version that includes this patch once it is released. Patch status is not yet confirmed in the provided data — check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gm6x-fg6p-956v
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72011"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b78bf8831d53950218e
Added to database: 08/15/2026, 15:53:28 UTC
Last enriched: 08/15/2026, 17:09:26 UTC
Last updated: 08/15/2026, 17:09:26 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.