Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98387

s390/crypto: Fix skcipher_walk return code handling in aes_s390

Description

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes from skcipher_walk_virt() were not properly checked before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt(). If skcipher_walk_virt() fails, the walk structure may be in an undefined state, and attempting to process data could lead to incorrect behavior or accessing uninitialized memory. Add proper return code checking to ensure correct handling of the walk initialization and walk advance and eventually return to the caller with that return code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 to < 89b58645646d1dac34162cc2597f42266bfbf930affected
  • 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 to < 35c3f97569306050e818fa18e17fa97c358f0f28affected
  • 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 to < aea3e1588f08e381a7a57b2bf1a60cc2347904cdaffected
  • 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 to < 15fa028589c3a2545f0bff355eff06d5844196bfaffected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References