CVE-2026-80543

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the s390/zcrypt component, the functions xcrb msg to type6cprb msgx() and xcrb msg to type6 ep11cprb msgx() copy user space messages into a kernel buffer based on the message length. Because subsequent processing requires the message to be adjusted to a 4-byte length, up to 3 bytes of uninitialized kernel memory may be forwarded, potentially exposing sensitive kernel memory to the crypto card firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.