CVE-2026-68452
s390/zcrypt: Validate length for CCA AES cipher key requests
CVE-2026-68452 is fixed in 90 products on 1 platform, first by DEBIAN-CVE-2026-68452, released August 16, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0013
2nd percentile
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel · rocky 9 | 0:5.14.0-687.66.1.el9_8 | RLSA-2026:95370 | Nov 7, 2026 |
| kernel-64k · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug-devel-matched · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-debug-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-devel-matched · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64k-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-abi-stablelists · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-abi-stablelists · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-azure · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-azure · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-azure · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-core · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-cross-headers · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-cross-headers · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-core · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-devel · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-devel-matched · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-devel-matched · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-modules · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-modules-core · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-modules-extra · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-debug-uki-virt · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-debug-uki-virt · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.138.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-default · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24197-1 | Nov 7, 2026 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.39.1.160000.2.25 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.138.1.150600.12.64.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.84.1.150700.17.47.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.39.1.160000.2.26 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-devel · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-devel-matched · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-devel-matched · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-doc · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-doc · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.138.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-docs · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-headers · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-headers · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-livepatch-SLE15-SP6_Update_32 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-livepatch-SLE15-SP7-RT_Update_21 · sles 15.7 | 1-150700.1.3.1 | SUSE-SU-2026:4640-1 | Nov 7, 2026 |
| kernel-livepatch-SLE15-SP7_Update_22 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-modules · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-modules-core · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-modules-extra · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.138.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-rt · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-rt-64k · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-debug · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-debug-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-debug-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-debug-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-debug-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-debug-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-64k-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-debug · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-debug-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-debug-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-debug-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-debug-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-debug-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-rt-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.138.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-source · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.138.1 | SUSE-SU-2026:4660-1 | Nov 7, 2026 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-syms · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-tools · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-tools · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-tools-libs · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-tools-libs · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-tools-libs-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-tools-libs-devel · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-uki-virt · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-uki-virt · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-uki-virt-addons · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-uki-virt-addons · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| kernel-zfcpdump · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.39.1 | OPENSUSE-SU-2026:22091-1 | Nov 7, 2026 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.84.1 | SUSE-SU-2026:4706-1 | Nov 7, 2026 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.39.1 | SUSE-SU-2026:24235-1 | Nov 7, 2026 |
| kernel-zfcpdump-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-zfcpdump-devel · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-zfcpdump-devel-matched · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-zfcpdump-modules · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-zfcpdump-modules-core · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| kernel-zfcpdump-modules-extra · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| libperf · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| libperf · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| linux · Debian 12.15 (bookworm) | 6.1.187-1 | DEBIAN-CVE-2026-68452 | Aug 16, 2026 |
| linux · Debian 13.5 (trixie) | 6.12.105-1 | DEBIAN-CVE-2026-68452 | Aug 16, 2026 |
| linux · Debian 14 | 7.1.8-1 | DEBIAN-CVE-2026-68452 | Aug 16, 2026 |
| linux-6.12 · Debian 12.15 (bookworm) | 6.12.107-1~deb12u1 | DEBIAN-CVE-2026-68452 | Aug 16, 2026 |
| perf · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| perf · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| python3-perf · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| python3-perf · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| rtla · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| rtla · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
| rv · almalinux 9 | 5.14.0-687.66.1.el9_8 | ALSA-2026:95370 | Nov 7, 2026 |
| rv · ol 9 | 0:5.14.0-687.66.1.el9_8 | ELSA-2026-95370 | Nov 7, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.