{"id":"CVE-2026-68452","revision":"cbdcc728bf3347e1b0d7bd0275ff1ad6","records":[{"revision":"cbdcc728bf3347e1b0d7bd0275ff1ad6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-68452","aliases":[],"title":"s390/zcrypt: Validate length for CCA AES cipher key requests","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Validate length for CCA AES cipher key requests\n\ncca_cipher2protkey() derives the copy length for the CPRB parameter\nblock directly from the length field in the key token. Reject the\nrequest early if the token length exceeds the available space in the\nparameter block.","state":0,"publishedAt":"2026-08-13T13:59:54.84+00:00","modifiedAt":"2026-10-19T21:09:11.097+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/s390/crypto/zcrypt_ccamisc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"be037204e4f595e4bd2159acda146677a1dc6342\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"4e500ecb6704d879f9c2417c2ed6faba595015ca\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"7f9e5a3dbb14a9b321a1dfa30390402c673f82dc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"406b317ea2b501f6f5eca1264293c9399a73a778\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"4fc46deceda076d429ef3fab2ccf8d96629ebd23\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"ad93a1f1a45652478c0cf4eb029114e03af57f3b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"3859f630b674801a00bca39bc451f52288591f65\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\n                            \"lessThan\": \"06afe425d5283b9764303de47f554da5a808ce8a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/s390/crypto/zcrypt_ccamisc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.265\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.216\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.183\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.151\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.103\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.44\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.8\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/be037204e4f595e4bd2159acda146677a1dc6342","https://git.kernel.org/stable/c/4e500ecb6704d879f9c2417c2ed6faba595015ca","https://git.kernel.org/stable/c/7f9e5a3dbb14a9b321a1dfa30390402c673f82dc","https://git.kernel.org/stable/c/406b317ea2b501f6f5eca1264293c9399a73a778","https://git.kernel.org/stable/c/4fc46deceda076d429ef3fab2ccf8d96629ebd23","https://git.kernel.org/stable/c/ad93a1f1a45652478c0cf4eb029114e03af57f3b","https://git.kernel.org/stable/c/3859f630b674801a00bca39bc451f52288591f65","https://git.kernel.org/stable/c/06afe425d5283b9764303de47f554da5a808ce8a"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68452","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-68452","identifiers":["CVE-2026-68452"]},"retained":false,"historicalAffected":[]}],"coverage":[]}