CVE-2026-68452 | BDVDB-2026-358969 Detail
LinuxLinux
Description#
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
References#
- https://git.kernel.org/stable/c/be037204e4f595e4bd2159acda146677a1dc6342
- https://git.kernel.org/stable/c/4e500ecb6704d879f9c2417c2ed6faba595015ca
- https://git.kernel.org/stable/c/7f9e5a3dbb14a9b321a1dfa30390402c673f82dc
- https://git.kernel.org/stable/c/406b317ea2b501f6f5eca1264293c9399a73a778
- https://git.kernel.org/stable/c/4fc46deceda076d429ef3fab2ccf8d96629ebd23
- https://git.kernel.org/stable/c/ad93a1f1a45652478c0cf4eb029114e03af57f3b
- https://git.kernel.org/stable/c/3859f630b674801a00bca39bc451f52288591f65
- https://git.kernel.org/stable/c/06afe425d5283b9764303de47f554da5a808ce8a
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.