All vulnerabilities
CVE-2026-97592

Linux: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in538f00558db9a66aeff20c36f43692c178a0e0ebAlso 6ab772d675a885c3119bf0e79ea9e84756d7657a, 991c875310254a13b3a637bb279379c8c66e842d and 8 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 538f00558db9a66aeff20c36f43692c178a0e0ebLinuxCVE List
  • 6ab772d675a885c3119bf0e79ea9e84756d7657aLinuxCVE List
  • 991c875310254a13b3a637bb279379c8c66e842dLinuxCVE List
  • 11eca05d2062032e1f07d56be58ed0b99f4b1d63LinuxCVE List
  • 8b90a47c4fba27bb4f2f086611742493629e9696LinuxCVE List
  • 8b7c3b6914f19caf648d05726a86af6326d3c2c6LinuxCVE List
Show all 11 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In function ctr_aes_crypt() there is a buffer used to process remaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and thus could lead to expose of unwanted data. When the buffer is used explicitly scrub it at the end of the code block to avoid exposure of maybe sensitive data.

In a similar way the function gcm_aes_crypt() hat an error path where the CPACF param block was not scrubbed. Instead of return early now these error paths go to end of function where explicit scrubbing is done. Similar with the buffers which are part of the gcm_sg_walk structs from the variables gw_in and gw_out.

Text from CVE List

Affected versions 24

  • Linuxaffected: cd51e26a3b89706beec64f2d8296cfb1c34e0c79 before 538f00558db9a66aeff20c36f43692c178a0e0ebCVE List
  • Linuxaffected: a7f580cdb42ec3d53bbb7c4e4335a98423703285 before 6ab772d675a885c3119bf0e79ea9e84756d7657aCVE List
  • Linuxaffected: dbc9a791a70ea47be9f2acf251700fe254a2ab23 before e17b85eb8cee90a1200fa5e7806db7ffa08a0608CVE List
  • Linuxaffected: d68ac38895e84446848b7647ab9458d54cacba3e before 991c875310254a13b3a637bb279379c8c66e842dCVE List
  • Linuxaffected: d07f951903fa9922c375b8ab1ce81b18a0034e3b before 11eca05d2062032e1f07d56be58ed0b99f4b1d63CVE List
  • Linuxaffected: d07f951903fa9922c375b8ab1ce81b18a0034e3b before 8b90a47c4fba27bb4f2f086611742493629e9696CVE List
  • Linuxaffected: d07f951903fa9922c375b8ab1ce81b18a0034e3b before a83488cecb35f924b7541306ed84893bb9906196CVE List
  • Linuxaffected: d07f951903fa9922c375b8ab1ce81b18a0034e3b before 8b7c3b6914f19caf648d05726a86af6326d3c2c6CVE List
  • Linuxaffected: e78f1a43e72daf77705ad5b9946de66fc708b874CVE List
  • Linuxaffected: 5.10.210 before 5.10.271CVE List
  • Linuxaffected: 5.15.149 before 5.15.222CVE List
  • Linuxaffected: 6.1.76 before 6.1.189CVE List
  • Linuxaffected: 6.6.15 before 6.6.158CVE List
  • Linuxaffected: 6.7.3 before 6.8CVE List
  • Linuxaffected: 6.8CVE List
  • Linuxunaffected: all versions before 6.8CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8