All vulnerabilities
CVE-2026-97591

Linux: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in203702f0013f9b7324e8c5facb6cd6e9c0942b13Also 330148371401de474b656eaf521861f12ec1a1ceCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 203702f0013f9b7324e8c5facb6cd6e9c0942b13LinuxCVE List
  • 330148371401de474b656eaf521861f12ec1a1ceLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine

When a request is transferred to the engine via crypto_transfer_hash_request_to_engine() there are two return codes signaling a successful transfer: EINPROGRESS and EBUSY. However the correct handling of EBUSY was missing and has been added as a return code indicating a successful transfer to the crypto engine.

Text from CVE List

Affected versions 8

  • Linuxaffected: cbbc675506cc4cd93e6f895e7c1f693156f9a95c before 203702f0013f9b7324e8c5facb6cd6e9c0942b13CVE List
  • Linuxaffected: cbbc675506cc4cd93e6f895e7c1f693156f9a95c before bcd7f1f1e2f2882ad206f72425255be105178151CVE List
  • Linuxaffected: cbbc675506cc4cd93e6f895e7c1f693156f9a95c before 330148371401de474b656eaf521861f12ec1a1ceCVE List
  • Linuxaffected: 6.17CVE List
  • Linuxunaffected: all versions before 6.17CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3