LOWVulnerability
CVE-2026-72236
In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() ev variable is userspace controlled via event->attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing array_index_nospec() call to prevent speculative execution.
Properties
- cve_id
- CVE-2026-72236
- published_at
- 2026-08-15T06:21:50.633
- last_modified
- 2026-08-23T13:16:42.093
Related Entities (1)
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph