All vulnerabilities
CVE-2026-98387

Linux: s390/crypto: Fix skcipher_walk return code handling in aes_s390

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in89b58645646d1dac34162cc2597f42266bfbf930Also 35c3f97569306050e818fa18e17fa97c358f0f28, 15fa028589c3a2545f0bff355eff06d5844196bfCVE List
Published14 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 89b58645646d1dac34162cc2597f42266bfbf930LinuxCVE List
  • 35c3f97569306050e818fa18e17fa97c358f0f28LinuxCVE List
  • 15fa028589c3a2545f0bff355eff06d5844196bfLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix skcipher_walk return code handling in aes_s390

The return codes from skcipher_walk_virt() were not properly checked before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt(). If skcipher_walk_virt() fails, the walk structure may be in an undefined state, and attempting to process data could lead to incorrect behavior or accessing uninitialized memory.

Add proper return code checking to ensure correct handling of the walk initialization and walk advance and eventually return to the caller with that return code.

Text from CVE List

Affected versions 10

  • Linuxaffected: 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 before 89b58645646d1dac34162cc2597f42266bfbf930CVE List
  • Linuxaffected: 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 before 35c3f97569306050e818fa18e17fa97c358f0f28CVE List
  • Linuxaffected: 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 before aea3e1588f08e381a7a57b2bf1a60cc2347904cdCVE List
  • Linuxaffected: 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 before 15fa028589c3a2545f0bff355eff06d5844196bfCVE List
  • Linuxaffected: 5.5CVE List
  • Linuxunaffected: all versions before 5.5CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4