Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-97592

s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctr_aes_crypt() there is a buffer used to process remaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and thus could lead to expose of unwanted data. When the buffer is used explicitly scrub it at the end of the code block to avoid exposure of maybe sensitive data. In a similar way the function gcm_aes_crypt() hat an error path where the CPACF param block was not scrubbed. Instead of return early now these error paths go to end of function where explicit scrubbing is done. Similar with the buffers which are part of the gcm_sg_walk structs from the variables gw_in and gw_out.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cd51e26a3b89706beec64f2d8296cfb1c34e0c79 to < 538f00558db9a66aeff20c36f43692c178a0e0ebaffected
  • a7f580cdb42ec3d53bbb7c4e4335a98423703285 to < 6ab772d675a885c3119bf0e79ea9e84756d7657aaffected
  • dbc9a791a70ea47be9f2acf251700fe254a2ab23 to < e17b85eb8cee90a1200fa5e7806db7ffa08a0608affected
  • d68ac38895e84446848b7647ab9458d54cacba3e to < 991c875310254a13b3a637bb279379c8c66e842daffected
  • d07f951903fa9922c375b8ab1ce81b18a0034e3b to < 11eca05d2062032e1f07d56be58ed0b99f4b1d63affected
  • d07f951903fa9922c375b8ab1ce81b18a0034e3b to < 8b90a47c4fba27bb4f2f086611742493629e9696affected
  • d07f951903fa9922c375b8ab1ce81b18a0034e3b to < a83488cecb35f924b7541306ed84893bb9906196affected
  • d07f951903fa9922c375b8ab1ce81b18a0034e3b to < 8b7c3b6914f19caf648d05726a86af6326d3c2c6affected
  • e78f1a43e72daf77705ad5b9946de66fc708b874affected
  • 5.10.210 to < 5.10.271affected
  • 5.15.149 to < 5.15.222affected
  • 6.1.76 to < 6.1.189affected
  • 6.6.15 to < 6.6.158affected
  • 6.7.3 to < 6.8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References