7.8

CVE-2026-68451

s390/zcrypt: Validate length for CCA ECC private key requests

In the Linux kernel, the following vulnerability has been resolved:

s390/zcrypt: Validate length for CCA ECC private key requests

cca_ecc2protkey() derives the copy length for the CPRB parameter
block directly from the length field in the key token. Reject the
request early if the token length exceeds the available space in the
parameter block.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < 7dc306ff7c4d951582adaae65e0aee9fb4968dbe
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < 447a37a6bef11bfd3645069e380460b11386e2b9
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < f0831f13c42c1261d449dcee8a035e1c6cd9fcaa
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < 013a4484f061a2b41f052e25c0015203287e63f1
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < 8fa3e9435a13c335efb63fb4f4e77531a0031159
Status affected
Version fa6999e326fe7851ecbd572b8cb9be8e930ebf41
Version < a9ae0f6dd45c3ccc1d69363f7aea8af179122730
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.10
Status affected
Version 0
Version < 5.10
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e
https://git.kernel.org/stable/c/ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5
https://git.kernel.org/stable/c/013a4484f061a2b41f052e25c0015203287e63f1
https://git.kernel.org/stable/c/8fa3e9435a13c335efb63fb4f4e77531a0031159
https://git.kernel.org/stable/c/a9ae0f6dd45c3ccc1d69363f7aea8af179122730
https://git.kernel.org/stable/c/447a37a6bef11bfd3645069e380460b11386e2b9
https://git.kernel.org/stable/c/7dc306ff7c4d951582adaae65e0aee9fb4968dbe
https://git.kernel.org/stable/c/f0831f13c42c1261d449dcee8a035e1c6cd9fcaa