CVE-2026-68453

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of user-controlled length fields within the Common Cryptographic Architecture CCA token structures. An attacker could manipulate these fields to cause a buffer over-read or...

CVE-2026-68453

The CVE-2026-68453 entry describes a Linux kernel fix for s390/zcrypt where buffer over-read could occur in cca_cipher2protkey due to unvalidated user-controlled len fields in CCA token structures. The fix adds validation of both the actual key buffer size and token length in all cca_check_sec*to...

EUVD-2026-57922

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...