CVE-2026-97591
Received Received - Intake

s390/crypto Engine EBUSY Handling Flaw in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via crypto_transfer_hash_request_to_engine() there are two return codes signaling a successful transfer: EINPROGRESS and EBUSY. However the correct handling of EBUSY was missing and has been added as a return code indicating a successful transfer to the crypto engine.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-10-16
AI Q&A
2026-09-25
EPSS Evaluated
2026-10-14
NVD
CVE-2026-97591
EUVD
EUVD-2026-86899

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect handling of the EBUSY return code when a cryptographic request is transferred to the hardware crypto engine. Normally, both EINPROGRESS and EBUSY indicate a successful transfer, but the kernel was not properly managing EBUSY, which could lead to issues in cryptographic operations.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390/crypto subsystem and may not have direct detection commands. Monitoring kernel logs for errors related to PHMAC or crypto engine operations could help identify issues. Check for messages indicating EBUSY handling failures in the crypto subsystem.

Impact Analysis

This vulnerability may cause cryptographic operations to fail or behave unexpectedly, potentially leading to data processing errors or security issues in systems relying on the affected Linux kernel components.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel issue related to cryptographic request handling in the s390 architecture, which does not impact data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update the Linux kernel to the latest patched version that includes the fix for this vulnerability. Ensure your system is running a kernel version where the EBUSY handling in PHMAC has been corrected to prevent potential crypto engine transfer issues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97591. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart