CVE-2026-98387
Received
Received - Intake
Improper Return Code Handling in Linux Kernel s390 Crypto
Vulnerability report for CVE-2026-98387, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/crypto: Fix skcipher_walk return code handling in aes_s390
The return codes from skcipher_walk_virt() were not properly checked
before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().
If skcipher_walk_virt() fails, the walk structure may be in an undefined
state, and attempting to process data could lead to incorrect behavior
or accessing uninitialized memory.
Add proper return code checking to ensure correct handling of the walk
initialization and walk advance and eventually return to the caller
with that return code.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 |
| Linux | Linux | 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 |
| Linux | Linux | 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 |
| Linux | Linux | 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 |
| Linux | Linux | 5.5 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
