High severity7.8NVD Advisory· Published Aug 13, 2026· Updated Oct 19, 2026
CVE-2026-68452
CVE-2026-68452
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/zcrypt: Validate length for CCA AES cipher key requests
cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
76- osv-coords75 versionspkg:linux/kernelpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rvpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-uki-virt-addons
>= 5.4.0, < 5.10.265+ 74 more
- (no CPE)range: >= 5.4.0, < 5.10.265
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
- (no CPE)range: < 5.14.0-687.66.1.el9_8
Patches
Vulnerability mechanics
References
8- git.kernel.org/stable/c/06afe425d5283b9764303de47f554da5a808ce8anvd
- git.kernel.org/stable/c/3859f630b674801a00bca39bc451f52288591f65nvd
- git.kernel.org/stable/c/406b317ea2b501f6f5eca1264293c9399a73a778nvd
- git.kernel.org/stable/c/4e500ecb6704d879f9c2417c2ed6faba595015canvd
- git.kernel.org/stable/c/4fc46deceda076d429ef3fab2ccf8d96629ebd23nvd
- git.kernel.org/stable/c/7f9e5a3dbb14a9b321a1dfa30390402c673f82dcnvd
- git.kernel.org/stable/c/ad93a1f1a45652478c0cf4eb029114e03af57f3bnvd
- git.kernel.org/stable/c/be037204e4f595e4bd2159acda146677a1dc6342nvd
News mentions
0No linked articles in our index yet.