All vulnerabilities
CVE-2026-97589

Linux: s390/crypto: Fix wrong return code to engine in asynch callbacks

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
7.0High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in972e0d9b7d1d112240ccde1f1be85bf9ffaa1720Also 5480291aa848e19e61175abfd457933516db70c6CVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 972e0d9b7d1d112240ccde1f1be85bf9ffaa1720LinuxCVE List
  • 5480291aa848e19e61175abfd457933516db70c6LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix wrong return code to engine in asynch callbacks

When crypto_finalize_hash_request() or crypto_finalize_skcipher_request() explicitly completes a request, the do_one_request callback must return 0 to indicate successful handling. Returning a negative error code causes the crypto engine to assume the driver failed to take ownership and triggers a second completion via crypto_request_complete(), resulting in a double completion. This pattern occurs in paes_s390.c 4 times and once in phmac_s390.c.

Fixed in phmac_do_one_request() and all four paes do_one_request callbacks (ecb, cbc, ctr, xts) by returning 0 after explicit finalization instead of propagating the error code.

Text from CVE List

Affected versions 8

  • Linuxaffected: 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 before 972e0d9b7d1d112240ccde1f1be85bf9ffaa1720CVE List
  • Linuxaffected: 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 before 5480291aa848e19e61175abfd457933516db70c6CVE List
  • Linuxaffected: 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 before ac1481320110b803ab9b79ab4d2ca11a74fc05f2CVE List
  • Linuxaffected: 6.16CVE List
  • Linuxunaffected: all versions before 6.16CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3