CVE-2026-68453

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of user-controlled length fields within the Common Cryptographic Architecture CCA token structures. An attacker could manipulate these fields to cause a buffer over-read or...

EUVD-2026-57922

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...

CVE-2026-68453

CVE-2026-68453 affects the Linux kernel, s390/zcrypt: a buffer over-read/under-run was possible due to insufficient validation of user-controlled length fields in CCA token structures (cca_check_sec*token() and related key handling). The fix enforces that the key buffer length is at least the tok...

PT-2026-71615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/zcrypt component where CCA token structures contain user-controlled len fields that are used without proper validation against the actual buffer size and...