PT-2026-71613

CVE-2026-68451

·

Published

2026-08-13

·

Updated

2026-11-04

Description by

CVSS 4.0
8.5
High
MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the s390/zcrypt component where the cca ecc2protkey() function derives the copy length for the CPRB parameter block directly from the length field in the key token. This occurs without validating if the token length exceeds the available space in the parameter block.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2026-68451
OPENSUSE-SU-2026:22091-1
SUSE-SU-2026:24179-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24184-1
SUSE-SU-2026:24197-1
SUSE-SU-2026:24235-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4660-1
SUSE-SU-2026:4665-1
SUSE-SU-2026:4666-1
SUSE-SU-2026:4667-1
SUSE-SU-2026:4668-1
SUSE-SU-2026:4706-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8886-1
USN-8959-1
USN-8960-1
USN-8963-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com