CVE-2026-68451
Received Received - Intake

s390/zcrypt CCA ECC Private Key Length Validation Flaw

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-68451
EUVD
EUVD-2026-57920

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's s390/zcrypt component. It involves improper validation of the length field in a CCA ECC private key request. The function cca_ecc2protkey() uses the token length directly to determine the copy length for the CPRB parameter block without checking if it exceeds the available space, which could lead to buffer overflow or memory corruption.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390/zcrypt component and involves improper validation of CCA ECC private key requests. Detection requires checking kernel logs for related errors or examining the kernel version for the presence of the fix.

Impact Analysis

An attacker with access to the system could exploit this flaw to cause a denial of service, execute arbitrary code, or escalate privileges by sending a maliciously crafted key request. This may lead to system instability or unauthorized access if the kernel is compromised.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this issue. Monitor kernel logs for errors related to s390/zcrypt or CCA ECC private key requests. Restrict access to cryptographic operations if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68451. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart