CVE-2026-98222

In the Linux kernel, the following vulnerability has been resolved:

KEYS: encrypted: fix integer overflow of datablob len

encrypted key alloc() stores datablob len in a u16. It is computed from multiple string and payload lengths. If the result exceeds U16 MAX, the assignment truncates the allocation size. KASAN reports a 32760-byte slab-out-of-bounds write when ekey init() copies the master key description into the undersized buffer.

The total payload length stored in key->datalen is also a u16. Use check add overflow() to reject values that do not fit either destination, and use kzalloc flex() for the flexible-array allocation.