CVE-2026-68451

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/zcrypt: Validate length for CCA ECC private key requests

cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < 7dc306ff7c4d951582adaae65e0aee9fb4968dbe; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < 447a37a6bef11bfd3645069e380460b11386e2b9; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < f0831f13c42c1261d449dcee8a035e1c6cd9fcaa; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < 013a4484f061a2b41f052e25c0015203287e63f1; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < 8fa3e9435a13c335efb63fb4f4e77531a0031159; >= fa6999e326fe7851ecbd572b8cb9be8e930ebf41, < a9ae0f6dd45c3ccc1d69363f7aea8af179122730
LinuxLinux5.10

References

Timeline

Published
Aug 13, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-684527.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipheCVE-2026-684537.1In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validationCVE-2026-684548.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest sCVE-2026-68455In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessCVE-2026-68456In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() ueagCVE-2026-684579.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZEROCVE-2026-684587.8In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it binder_transaction(CVE-2026-68459In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() WheCVE-2026-68467.8A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object CVE-2026-68460In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fs_balance_fs() When the f2fs filesyCVE-2026-684617.8In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwCVE-2026-684627.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier re
CVE-2026-68451: High severity, CVSS 7.8 | Vulnix