Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-68451

s390/zcrypt: Validate length for CCA ECC private key requests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < 7dc306ff7c4d951582adaae65e0aee9fb4968dbeaffected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < 447a37a6bef11bfd3645069e380460b11386e2b9affected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < f0831f13c42c1261d449dcee8a035e1c6cd9fcaaaffected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < dd25bd9b0f36849808bd7625dcc59dd4c1aeef3eaffected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5affected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < 013a4484f061a2b41f052e25c0015203287e63f1affected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < 8fa3e9435a13c335efb63fb4f4e77531a0031159affected
  • fa6999e326fe7851ecbd572b8cb9be8e930ebf41 to < a9ae0f6dd45c3ccc1d69363f7aea8af179122730affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References