CVE-2026-72025
Description
In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with different data length When data buffers are reused, e.g. for interval sample records, the first record determines the data length, and the size of the buffer for user copy. Current monwriter code does not check if the data length was changed for subsequent records, which also would never happen for valid user programs. However, a malicious user could change the data length, resulting in out of bounds user copy to the kernel buffer, and memory corruption. By default, the monwriter misc device is created with root-only permissions, so practical impact is typically low. Fix this by checking for changed data length and rejecting such records.
How to fix
- Linux Linux096dff1247037d329c04b3a5be0ecdfb1c5c7ac6, d39cf4a6d721b1ae21eb53bbf3e8cd984253d7ab, 759d91378203ea35fa9bca6726dcf0010de081fb, 036bc5661060702e798d215e81bb46da530965b3, 01f3ce411711c2c919598ea25320a5a48f71edbc, f0745496f7c171271cafd9457df3b914a483ddeb, ae5347f3db1782c6118f6cc0d9fd8b1d43397db3, 2995ccec260caa9e85b3301a4aba1e66ed80ad74 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < 096dff1247037d329c04b3a5be0ecdfb1c5c7ac6, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < d39cf4a6d721b1ae21eb53bbf3e8cd984253d7ab, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < 759d91378203ea35fa9bca6726dcf0010de081fb, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < 036bc5661060702e798d215e81bb46da530965b3, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < 01f3ce411711c2c919598ea25320a5a48f71edbc, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < f0745496f7c171271cafd9457df3b914a483ddeb, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < ae5347f3db1782c6118f6cc0d9fd8b1d43397db3, 31b58088292c7f00f0b81088bfb557285b0b6247 ≤ v < 2995ccec260caa9e85b3301a4aba1e66ed80ad74, 2.6.19 | 096dff1247037d329c04b3a5be0ecdfb1c5c7ac6, d39cf4a6d721b1ae21eb53bbf3e8cd984253d7ab, 759d91378203ea35fa9bca6726dcf0010de081fb, 036bc5661060702e798d215e81bb46da530965b3, 01f3ce411711c2c919598ea25320a5a48f71edbc, f0745496f7c171271cafd9457df3b914a483ddeb, ae5347f3db1782c6118f6cc0d9fd8b1d43397db3, 2995ccec260caa9e85b3301a4aba1e66ed80ad74 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.