Log in Start free

Vulnerability · Published Aug 13, 2026 · Assigned by Linux

CVE-2026-68452s390/zcrypt: Validate length for CCA AES cipher key requests

High 7.8

In plain English

A high-severity buffer overflow in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9kernel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-abi-stablelists5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-cross-headers5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-doc5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-headers5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-tools5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-tools-libs5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-uki-virt5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9libperf5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9perf5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9python3-perf5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9rtla5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9rv5.14.0-687.66.1.el9_8ALSA-2026:95370
Debian:12linux6.1.187-1DEBIAN-CVE-2026-68452
Debian:13linux6.12.105-1DEBIAN-CVE-2026-68452
Debian:14linux7.1.8-1DEBIAN-CVE-2026-68452
Debian:12linux-6.126.12.107-1~deb12u1DEBIAN-CVE-2026-68452
Rocky Linux:9kernel0:5.14.0-687.66.1.el9_8RLSA-2026:95370
Ubuntu:22.04:LTSlinux5.15.0-198.208UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux7.0.0-42.42USN-8959-1
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-aws5.15.0-1117.124UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17USN-8959-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure5.15.0-1123.132UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1122.131UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-gcp5.15.0-1118.128UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18USN-8959-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-gke5.15.0-1113.119UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1100.108UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1USN-8959-1
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-ibm5.15.0-1111.115UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17USN-8959-1
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1112.118UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-kvm5.15.0-1109.114UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-195.205UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1112.113UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1036.39UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59UBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17USN-8960-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1114.120UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16USN-8959-1
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68452
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68452
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68452

Affected products (as reported)

VendorProductVersions
Linux Linux 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before be037204e4f595e4bd2159acda146677a1dc63424bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before 4e500ecb6704d879f9c2417c2ed6faba595015ca4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before 7f9e5a3dbb14a9b321a1dfa30390402c673f82dc4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before 406b317ea2b501f6f5eca1264293c9399a73a7784bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before 4fc46deceda076d429ef3fab2ccf8d96629ebd234bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before ad93a1f1a45652478c0cf4eb029114e03af57f3b4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before 3859f630b674801a00bca39bc451f52288591f654bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd – before 06afe425d5283b9764303de47f554da5a808ce8a
Linux Linux 5.4

Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References