CVE-2026-80709

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390/zcrypt component regarding incorrect domain value verification when processing an EP11 CPRB (Crypto Parameter Record Block) for transmission to a crypto card. This flaw occurs during the upper limit check for the domain value on custom device nodes. When an administrative CPRB is sent, this may result in unauthorized access to heap memory located behind perms->adm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.