Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-68452

s390/zcrypt: Validate length for CCA AES cipher key requests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < be037204e4f595e4bd2159acda146677a1dc6342affected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < 4e500ecb6704d879f9c2417c2ed6faba595015caaffected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < 7f9e5a3dbb14a9b321a1dfa30390402c673f82dcaffected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < 406b317ea2b501f6f5eca1264293c9399a73a778affected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < 4fc46deceda076d429ef3fab2ccf8d96629ebd23affected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < ad93a1f1a45652478c0cf4eb029114e03af57f3baffected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < 3859f630b674801a00bca39bc451f52288591f65affected
  • 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to < 06afe425d5283b9764303de47f554da5a808ce8aaffected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References