CVE-2026-68451

HIGH 7.8

s390/zcrypt: Validate length for CCA ECC private key requests

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Vendor	linux
Product	linux
Ecosystems	Linux Kernel
Industries	Technology
Published	Aug 13, 2026
Last Updated	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new high vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Linux / Linux

fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 7dc306ff7c4d951582adaae65e0aee9fb4968dbe fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 447a37a6bef11bfd3645069e380460b11386e2b9 fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < f0831f13c42c1261d449dcee8a035e1c6cd9fcaa fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5 fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 013a4484f061a2b41f052e25c0015203287e63f1 fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < 8fa3e9435a13c335efb63fb4f4e77531a0031159 fa6999e326fe7851ecbd572b8cb9be8e930ebf41 < a9ae0f6dd45c3ccc1d69363f7aea8af179122730

Linux / Linux

5.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗