CVE-2026-31483: s390/syscalls: Add spectre boundary for syscall dispatch table
In the Linux kernel, the following vulnerability has been resolved:
s390/syscalls: Add spectre boundary for syscall dispatch table
The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec() boundary to prevent access past the syscall function pointer tables.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31483?
CVE-2026-31483 has been classified with a severity that indicates a significant risk, as it allows userspace to control syscall numbers without proper bounds checking.
How do I fix CVE-2026-31483?
To fix CVE-2026-31483, you should upgrade your Linux kernel to a version that has addressed the vulnerability, such as versions above 6.19.
Which versions of the Linux kernel are affected by CVE-2026-31483?
CVE-2026-31483 affects Linux kernel versions from 5.12.1 to 6.19.10.
What systems are at risk from CVE-2026-31483?
Systems running vulnerable versions of the Linux kernel on s390 architecture are at risk due to CVE-2026-31483.
What are the potential impacts of CVE-2026-31483?
The potential impacts of CVE-2026-31483 include unauthorized access or control over system calls, which can lead to data leakage or system compromise.