CVE-2026-68452

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390/zcrypt component where the cca cipher2protkey() function derives the copy length for the CPRB parameter block directly from the length field in the key token without proper validation. This can lead to a situation where the token length exceeds the available space in the parameter block.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.