CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests
In the Linux kernel, the following vulnerability has been resolved:
s390/zcrypt: Validate length for CCA ECC private key requests
ccaecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68451?
CVE-2026-68451 has a severity score of 34.
How do I fix CVE-2026-68451?
To fix CVE-2026-68451, update your Linux kernel to the latest version where the vulnerability has been resolved.
What systems are affected by CVE-2026-68451?
CVE-2026-68451 affects systems running a vulnerable version of the Linux kernel with s390/zcrypt functionality.
What impact does CVE-2026-68451 have on security?
CVE-2026-68451 could allow unauthorized access to cryptographic operations due to improper validation of ECC private key requests.
Is there a workaround for CVE-2026-68451?
There are no known workarounds for CVE-2026-68451, and it is recommended to apply the necessary update as soon as possible.