s390/zcrypt: Validate length for CCA ECC private key requests (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.13 % · percentile 3 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.
Weaknesses (CWE)
- CWE-120 — Buffer Copy without Checking Size of Input
References
- https://git.kernel.org/stable/c/7dc306ff7c4d951582adaae65e0aee9fb4968dbe
- https://git.kernel.org/stable/c/447a37a6bef11bfd3645069e380460b11386e2b9
- https://git.kernel.org/stable/c/f0831f13c42c1261d449dcee8a035e1c6cd9fcaa
- https://git.kernel.org/stable/c/dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e
- https://git.kernel.org/stable/c/ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5
- https://git.kernel.org/stable/c/013a4484f061a2b41f052e25c0015203287e63f1
- https://git.kernel.org/stable/c/8fa3e9435a13c335efb63fb4f4e77531a0031159
- https://git.kernel.org/stable/c/a9ae0f6dd45c3ccc1d69363f7aea8af179122730
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-57920
- GCVE · GCVE-0-2026-68451
CERT-FR advisories
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1090 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 7dc306ff7c4d951582adaae65e0aee9fb4968dbe ; affected fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 447a37a6bef11bfd3645069e380460b11386e2b9 ; affected fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < f0831f13c42c1261d449dcee8a035e1c6cd9fcaa ; affected fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e ; affected fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5 ; affected fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 013a4484f061a2b41f052e25c0015203287e63f1 |
| Linux · Linux | affected 5.10 ; unaffected 0 < 5.10 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.151 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |