CVE-2026-97590

CVE-2026-97590

published September 25, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix missing scrub of temp buffers with PAES algorithm

In function ctr_paes_do_crypt() there is a buffer used to process

remaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and

thus could lead to expose of unwanted data. Rework the code to

explicitly scrub the buffer at the end of the function to avoid

exposure of maybe sensitive data.

In function __xts_2keys_prep_param() change the existing scrub to

clean the whole param block instead of just the key field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-09-25T15:17Z
References (3)
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:22Z
    s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
    cvelistv5