CVE-2026-97592: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

Published Sep 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In function ctraescrypt() there is a buffer used to process remaining bytes < AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of unwanted data. When the buffer is used explicitly scrub it at the end of the code block to avoid exposure of maybe sensitive data.

In a similar way the function gcmaescrypt() hat an error path where the CPACF param block was not scrubbed. Instead of return early now these error paths go to end of function where explicit scrubbing is done. Similar with the buffers which are part of the gcmsgwalk structs from the variables gwin and gwout.

Affected Software

1 affected component
Linux Linux kernel

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Compensating control

    Explicitly scrub temporary buffers and the CPACF parameter block before returning, including buffers used by ctr_aes_crypt(), gcm_aes_crypt(), and gcm_sg_walk; ensure error paths that reach the end of the function perform the scrubbing, including remaining bytes smaller than AES_BLOCK_SIZE and the buffers represented by gw_in and gw_out.

Event History

Sep 25, 2026
CVE Published
via MITRE·10:22 AM
Data Sourced
via MITRE·10:22 AM
Description
Data Sourced
via NVD·11:17 AM
Description

Frequently Asked Questions

1

Which systems are exposed to this issue?

Systems using the Linux kernel on s390 architecture with the affected s390 crypto AES CTR or GCM code are relevant. The provided data does not identify affected kernel versions or configuration defaults.

2

What conditions are required for sensitive data to remain exposed?

The issue involves temporary buffers used during AES CTR processing of remaining data smaller than an AES block, plus AES GCM parameter and scatter-gather buffers on certain error paths. Exposure depends on those buffers not being scrubbed after use.

3

What should be done if immediate patching is not possible?

The provided fix is to explicitly scrub the temporary AES CTR buffer, the GCM CPACF parameter block, and GCM scatter-gather walk buffers, including on error paths. No alternative mitigation or workaround is provided.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203