The Wire · Showcase
S390 FIXES PATCH TWO KERNEL SECURITY ISSUES OVERNIGHT
By RepoJournal · Filed · About Linux
The s390 architecture received critical patches for a cryptographic key verification flaw and a buffer reuse vulnerability that could expose kernel memory.
Linus merged the s390-7.2-3 fixes [1] addressing two security-class issues hitting production systems. The first kill a generic key-length check in PKEY_VERIFYPROTK that was mangling bit-size calculations, leaving protected key verification to fail silently instead of rejecting bad input. The second plugs a monwriter buffer reuse hole where the kernel wasn't validating record data length changes before copying user input, creating an out-of-bounds write path into kernel space [1]. In parallel, MIPS landed its own fix set [2] focused on architecture-specific stability: Ingenic USB PHY symbol enablement, Loongson64 IRQ work via self-IPI, highmem block removal checks, vDSO build salt, and DEC RTC deregistration on failure. Neither is a headline-grabbing universal issue, but the s390 cryptographic handling matters if you're running encrypted key workloads on IBM hardware.
Action items
- → Pull s390-7.2-3 if you run s390 architecture systems with PKEY workloads torvalds/linux [immediate]
- → Rebase MIPS systems on current if you maintain Loongson64 or DEC platforms torvalds/linux [plan]
References
- [1] Merge tag 's390-7.2-3' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux torvalds/linux
- [2] Merge tag 'mips-fixes_7.2_1' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux torvalds/linux
FAQ
- What changed in Linux on July 5, 2026?
- The s390 architecture received critical patches for a cryptographic key verification flaw and a buffer reuse vulnerability that could expose kernel memory.
- What should Linux teams do about it?
- Pull s390-7.2-3 if you run s390 architecture systems with PKEY workloads • Rebase MIPS systems on current if you maintain Loongson64 or DEC platforms
- Which Linux repositories shipped on July 5, 2026?
- torvalds/linux