{"id":"CVE-2026-68385","revision":"51edfdb47459421dade4d98e54a747fa","records":[{"revision":"51edfdb47459421dade4d98e54a747fa","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-68385","aliases":[],"title":"s390/checksum: Fix csum_partial() without vector facility","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/checksum: Fix csum_partial() without vector facility\n\nCurrently csum_partial() calls csum_copy() with copy=false and dst=NULL.\nOn machines without the vector facility, csum_copy() falls back to\ncksm(dst, ...), causing the checksum to be calculated from address zero\ninstead of the source buffer.\n\nThe VX implementation already checksums data loaded from src. Make the\nfallback do the same by passing src to cksm().","state":0,"publishedAt":"2026-08-10T12:04:04.281+00:00","modifiedAt":"2026-10-19T21:09:07.531+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/s390/lib/csum-partial.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"dcd3e1de9d17dc43dfed87a9fc814b9dec508043\",\n                            \"lessThan\": \"5fc0a2a6eeb99cac991242bb48796c7749ce3261\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"dcd3e1de9d17dc43dfed87a9fc814b9dec508043\",\n                            \"lessThan\": \"1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"dcd3e1de9d17dc43dfed87a9fc814b9dec508043\",\n                            \"lessThan\": \"898bb2814f38399108bdd2113f38d97383a7036a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"dcd3e1de9d17dc43dfed87a9fc814b9dec508043\",\n                            \"lessThan\": \"4bb06b60d982355e22647b3d12d6619419f8c1fa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/s390/lib/csum-partial.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.101\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.42\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.6\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://git.kernel.org/stable/c/5fc0a2a6eeb99cac991242bb48796c7749ce3261","https://git.kernel.org/stable/c/1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722","https://git.kernel.org/stable/c/898bb2814f38399108bdd2113f38d97383a7036a","https://git.kernel.org/stable/c/4bb06b60d982355e22647b3d12d6619419f8c1fa"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68385","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-68385","identifiers":["CVE-2026-68385"]},"retained":false,"historicalAffected":[]}],"coverage":[]}