CVE-2026-68451CWE-120

CVE-2026-68451

High · published August 13, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/zcrypt: Validate length for CCA ECC private key requests

cca_ecc2protkey() derives the copy length for the CPRB parameter

block directly from the length field in the key token. Reject the

request early if the token length exceeds the available space in the

parameter block.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-13T19:19Z
References (8)
https://git.kernel.org/stable/c/013a4484f061a2b41f052e25c0015203287e63f1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/447a37a6bef11bfd3645069e380460b11386e2b9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7dc306ff7c4d951582adaae65e0aee9fb4968dbe · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8fa3e9435a13c335efb63fb4f4e77531a0031159 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a9ae0f6dd45c3ccc1d69363f7aea8af179122730 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dd25bd9b0f36849808bd7625dcc59dd4c1aeef3e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ecc3b8691c1935f9f3e4eb964ab11e40fdec17f5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f0831f13c42c1261d449dcee8a035e1c6cd9fcaa · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 13 AUG 13:59Z
    s390/zcrypt: Validate length for CCA ECC private key requests
    cvelistv5