Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-68385

s390/checksum: Fix csum_partial() without vector facility

Description

In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csum_partial() calls csum_copy() with copy=false and dst=NULL. On machines without the vector facility, csum_copy() falls back to cksm(dst, ...), causing the checksum to be calculated from address zero instead of the source buffer. The VX implementation already checksums data loaded from src. Make the fallback do the same by passing src to cksm().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dcd3e1de9d17dc43dfed87a9fc814b9dec508043 to < 5fc0a2a6eeb99cac991242bb48796c7749ce3261affected
  • dcd3e1de9d17dc43dfed87a9fc814b9dec508043 to < 1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722affected
  • dcd3e1de9d17dc43dfed87a9fc814b9dec508043 to < 898bb2814f38399108bdd2113f38d97383a7036aaffected
  • dcd3e1de9d17dc43dfed87a9fc814b9dec508043 to < 4bb06b60d982355e22647b3d12d6619419f8c1faaffected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References