CVE-2026-72236

In the Linux kernel, the following vulnerability has been resolved: s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

CVE-2026-72236 s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

In the Linux kernel, the following vulnerability has been resolved: s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after bounds checking, but without speculation barriers. Add the missing...

PT-2026-72424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hw perf event init function where the ev variable, which is controlled by userspace via event-attr.config, is used as an array index. Although bounds checking is...