UBUNTU-CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

UBUNTU-CVE-2026-97591

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via cryptotransferhashrequesttoengine there are two return codes signaling a successful transfer:...

CVE-2026-97592 s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

CVE-2026-97592 s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

EUVD-2026-86900

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

CVE-2026-97592

The Linux kernel contains a vulnerability in the s390/crypto component related to the AES CTR and GCM algorithms. Specifically, the ctr_aes_crypt() function failed to scrub a buffer used for processing remaining bytes smaller than AES_BLOCK_SIZE, potentially leading to the exposure of sensitive d...

EUVD-2026-86898

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function ctrpaesdocrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of unwanted...

CVE-2026-97591 s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via cryptotransferhashrequesttoengine there are two return codes signaling a successful transfer:...

CVE-2026-97590

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function ctrpaesdocrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of unwanted...

CVE-2026-97591 s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via cryptotransferhashrequesttoengine there are two return codes signaling a successful transfer:...

CVE-2026-97590 s390/crypto: Fix missing scrub of temp buffers with PAES algorithm

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function ctrpaesdocrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of unwanted...

CVE-2026-97590

The Linux kernel contains a vulnerability in the s390/crypto implementation where temporary buffers used with the PAES algorithm were not properly scrubbed. Specifically, in the ctr_paes_do_crypt() function, a buffer used to process remaining bytes (less than AES_BLOCK_SIZE) lacked explicit scrub...

CVE-2026-97590 s390/crypto: Fix missing scrub of temp buffers with PAES algorithm

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function ctrpaesdocrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of unwanted...

CVE-2026-97591

The Linux kernel (specifically the s390/crypto architecture) contained a logic flaw in how it handled return codes when pushing requests to the crypto engine. In the PHMAC function, the crypto_transfer_hash_request_to_engine() call could return EBUSY in addition to EINPROGRESS to signal a success...

EUVD-2026-86899

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via cryptotransferhashrequesttoengine there are two return codes signaling a successful transfer:...

CVE-2026-97591

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via cryptotransferhashrequesttoengine there are two return codes signaling a successful transfer:...

EUVD-2026-86897

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asynch callbacks When cryptofinalizehashrequest or cryptofinalizeskcipherrequest explicitly completes a request, the doonerequest callback must return 0 to indicate successful...

CVE-2026-97589

The Linux kernel contains a vulnerability in the s390/crypto subsystem where asynch callbacks return an incorrect error code. Specifically, when crypto_finalize_hash_request() or crypto_finalize_skcipher_request() explicitly completes a request, the do_one_request callback must return 0. Returnin...

CVE-2026-97589 s390/crypto: Fix wrong return code to engine in asynch callbacks

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asynch callbacks When cryptofinalizehashrequest or cryptofinalizeskcipherrequest explicitly completes a request, the doonerequest callback must return 0 to indicate successful...