CVE-2026-97588
Linux: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 7a08507ea5b4d06ad8d269287913573f34467565LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
When hardware persistently returns -EBUSY after exhausting retries, the error propagates to crypto_finalize_*_request(). The crypto API's completion wrapper treats -EBUSY as a queueing status and swallows it, preventing the completion callback from firing. This causes callers using crypto_wait_req() to block indefinitely.
Translate persistent -EBUSY to -EIO after retry exhaustion to ensure proper error propagation and callback invocation.
Text from CVE List
Affected versions 8
- Linuxaffected: 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 before f6b263679aa72ad2e534bf93db55f2589549a40eCVE List
- Linuxaffected: 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 before e267bd142664a181474112392aeaa8b3d4b12f2eCVE List
- Linuxaffected: 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 before 7a08507ea5b4d06ad8d269287913573f34467565CVE List
- Linuxaffected: 6.16CVE List
- Linuxunaffected: all versions before 6.16CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List