CVE-2026-68453

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390/zcrypt component where CCA token structures contain user-controlled len fields that are used without proper validation against the actual buffer size and minimum token structure size. This can lead to a buffer over-read if the len field is set larger than the actual buffer size, or a buffer under-run if a very small len value is used. Such conditions may result in a kernel crash or the exposure of memory when the data is sent as part of a request to the crypto card. The flaw involves the cca cipher2protkey function, the cca gencipherkey() function, and all cca check sec*token() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.