{"id":"CVE-2026-80709","revision":"3cdc7c598f124c87a475619854673488","records":[{"revision":"3cdc7c598f124c87a475619854673488","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-80709","aliases":[],"title":"s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Fix wrong domain value verification with EP11 CPRBs\n\nThere is a wrong upper limit check for the domain value when an EP11\nCPRB is processed for sending to a crypto card. This check is only\nactive on custom device nodes but may lead to access heap memory\nbehind perms->adm when an administrative CPRB is sent.\nAdd correct limit (AP_DOMAINS = 256) checking to fix this.","state":0,"publishedAt":"2026-08-28T06:53:09.439+00:00","modifiedAt":"2026-10-16T19:26:34.515+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/s390/crypto/zcrypt_api.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"cfd68b33094e1a92249850ff3c3c92ae9112a541\",\n                            \"lessThan\": \"4589f742718d0256ea6dd1f5a78be6e689bdb8aa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cfd68b33094e1a92249850ff3c3c92ae9112a541\",\n                            \"lessThan\": \"b505dcc8307d64468b463dfad45a03bf865c637e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cfd68b33094e1a92249850ff3c3c92ae9112a541\",\n                            \"lessThan\": \"13e53d6ae1c3b2ff1be75b9ef09be26f4ec3ce15\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cfd68b33094e1a92249850ff3c3c92ae9112a541\",\n                            \"lessThan\": \"672b12940e3f1336dfed5287412a71500adf2a76\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cfd68b33094e1a92249850ff3c3c92ae9112a541\",\n                            \"lessThan\": \"1223477ca88e2396eca440919d0ca8754df79bd5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cfd68b33094e1a92249850ff3c3c92ae9112a541\",\n                            \"lessThan\": \"983279d7f86ade73db86f886e09172dd567031b5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/s390/crypto/zcrypt_api.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.18\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.183\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.151\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.103\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.44\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.8\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/4589f742718d0256ea6dd1f5a78be6e689bdb8aa","https://git.kernel.org/stable/c/b505dcc8307d64468b463dfad45a03bf865c637e","https://git.kernel.org/stable/c/13e53d6ae1c3b2ff1be75b9ef09be26f4ec3ce15","https://git.kernel.org/stable/c/672b12940e3f1336dfed5287412a71500adf2a76","https://git.kernel.org/stable/c/1223477ca88e2396eca440919d0ca8754df79bd5","https://git.kernel.org/stable/c/983279d7f86ade73db86f886e09172dd567031b5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80709","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-80709","identifiers":["CVE-2026-80709"]},"retained":false,"historicalAffected":[]}],"coverage":[]}