Log in Start free

Vulnerability · Published Aug 13, 2026 · Assigned by Linux

CVE-2026-68451s390/zcrypt: Validate length for CCA ECC private key requests

High 7.8

In plain English

A high-severity buffer overflow in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9kernel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-abi-stablelists5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-cross-headers5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-doc5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-headers5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-tools5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-tools-libs5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-uki-virt5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9libperf5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9perf5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9python3-perf5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9rtla5.14.0-687.66.1.el9_8ALSA-2026:95370
AlmaLinux:9rv5.14.0-687.66.1.el9_8ALSA-2026:95370
Debian:12linux6.1.187-1DEBIAN-CVE-2026-68451
Debian:13linux6.12.105-1DEBIAN-CVE-2026-68451
Debian:14linux7.1.8-1DEBIAN-CVE-2026-68451
Debian:12linux-6.126.12.107-1~deb12u1DEBIAN-CVE-2026-68451
Rocky Linux:9kernel0:5.14.0-687.66.1.el9_8RLSA-2026:95370
Ubuntu:22.04:LTSlinux5.15.0-198.208UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux7.0.0-42.42USN-8959-1
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-aws5.15.0-1117.124UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17USN-8959-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure5.15.0-1123.132UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1122.131UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-gcp5.15.0-1118.128UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18USN-8959-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-gke5.15.0-1113.119UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1100.108UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1USN-8959-1
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-ibm5.15.0-1111.115UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17USN-8959-1
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1112.118UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-kvm5.15.0-1109.114UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-195.205UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1112.113UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1036.39UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59UBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17USN-8960-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1114.120UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16USN-8959-1
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68451
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68451
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68451

Affected products (as reported)

VendorProductVersions
Linux Linux fa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before 7dc306ff7c4d951582adaae65e0aee9fb4968dbefa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before 447a37a6bef11bfd3645069e380460b11386e2b9fa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before f0831f13c42c1261d449dcee8a035e1c6cd9fcaafa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before dd25bd9b0f36849808bd7625dcc59dd4c1aeef3efa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5fa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before 013a4484f061a2b41f052e25c0015203287e63f1fa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before 8fa3e9435a13c335efb63fb4f4e77531a0031159fa6999e326fe7851ecbd572b8cb9be8e930ebf41 – before a9ae0f6dd45c3ccc1d69363f7aea8af179122730
Linux Linux 5.10

Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References