CVE-2026-80709
Received Received - Intake

Buffer Overflow in Linux Kernel s390/zcrypt

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device nodes but may lead to access heap memory behind perms->adm when an administrative CPRB is sent. Add correct limit (AP_DOMAINS = 256) checking to fix this.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-80709
EUVD
EUVD-2026-67444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. The issue only affects custom device nodes and may lead to accessing heap memory beyond perms->adm when an administrative CPRB is sent. The fix adds correct limit checking (AP_DOMAINS = 256) to prevent this.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to sensitive memory regions, potentially leading to privilege escalation or data leaks. It specifically affects systems using custom device nodes with EP11 CPRBs on s390/zcrypt.

Mitigation Strategies

Update the Linux kernel to the patched version that includes the fix for s390/zcrypt domain value verification with EP11 CPRBs. Monitor vendor advisories for kernel updates specific to your distribution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80709. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart