CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility
In the Linux kernel, the following vulnerability has been resolved:
s390/checksum: Fix csumpartial() without vector facility
Currently csumpartial() calls csumcopy() with copy=false and dst=NULL. On machines without the vector facility, csumcopy() falls back to cksm(dst, ...), causing the checksum to be calculated from address zero instead of the source buffer.
The VX implementation already checksums data loaded from src. Make the fallback do the same by passing src to cksm().
Affected Software
Event History
Frequently Asked Questions
What is the risk level of CVE-2026-68385?
The risk level of CVE-2026-68385 is 17.
What is CVE-2026-68385 about?
CVE-2026-68385 addresses the issue in the Linux kernel related to the csum_partial() function not handling machines without vector facility properly.
How do I fix CVE-2026-68385?
To fix CVE-2026-68385, update the Linux kernel to the latest version that includes the patch for this vulnerability.
Which software is affected by CVE-2026-68385?
CVE-2026-68385 affects the Linux Kernel.
When was CVE-2026-68385 published?
CVE-2026-68385 was published on August 10, 2026.