CVE-2026-98387

CVE-2026-98387

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix skcipher_walk return code handling in aes_s390

The return codes from skcipher_walk_virt() were not properly checked

before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().

If skcipher_walk_virt() fails, the walk structure may be in an undefined

state, and attempting to process data could lead to incorrect behavior

or accessing uninitialized memory.

Add proper return code checking to ensure correct handling of the walk

initialization and walk advance and eventually return to the caller

with that return code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.6th percentile
Published
2026-10-14T18:17Z
References (4)
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:25Z
    s390/crypto: Fix skcipher_walk return code handling in aes_s390
    cvelistv5
  • 14 OCT 13:25Z
    s390/crypto: Fix skcipher_walk return code handling in aes_s390
    cvelistv5