CVE-2026-97590

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390 crypto implementation where temporary buffers used with the PAES algorithm are not properly scrubbed. In the ctr paes do crypt() function, a buffer used to process remaining bytes smaller than AES BLOCK SIZE is not cleared, which could lead to the exposure of sensitive data. Additionally, the xts 2keys prep param() function fails to clean the entire parameter block, scrubbing only the key field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.