CVE-2026-68452

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of the length of CCA AES cipher key requests. A local attacker could exploit this by providing a specially crafted key token, which may lead to a buffer overflow. This could result...

CVE-2026-68452

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...

CVE-2026-68452

The CVE-2026-68452 vulnerability affects the Linux kernel s390/zcrypt component, where insufficient validation of the length for CCA AES cipher key requests allowed an attacker to craft a key token that could trigger a buffer overflow. The root cause is cca_cipher2protkey() deriving the CPRB copy...

CVE-2026-68452

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...

EUVD-2026-57921

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...

CVE-2026-68452 s390/zcrypt: Validate length for CCA AES cipher key requests

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...