CVE-2026-97592

s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

State: Published
Severity: Not scored
Published: Sep 25, 2026
Updated: Oct 19, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm

In function ctr_aes_crypt() there is a buffer used to process remaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and thus could lead to expose of unwanted data. When the buffer is used explicitly scrub it at the end of the code block to avoid exposure of maybe sensitive data.

In a similar way the function gcm_aes_crypt() hat an error path where the CPACF param block was not scrubbed. Instead of return early now these error paths go to end of function where explicit scrubbing is done. Similar with the buffers which are part of the gcm_sg_walk structs from the variables gw_in and gw_out.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cd51e26a3b89706beec64f2d8296cfb1c34e0c79 to before 538f00558db9a66aeff20c36f43692c178a0e0ebAffected a7f580cdb42ec3d53bbb7c4e4335a98423703285 to before 6ab772d675a885c3119bf0e79ea9e84756d7657aAffected dbc9a791a70ea47be9f2acf251700fe254a2ab23 to before e17b85eb8cee90a1200fa5e7806db7ffa08a0608Affected d68ac38895e84446848b7647ab9458d54cacba3e to before 991c875310254a13b3a637bb279379c8c66e842dAffected d07f951903fa9922c375b8ab1ce81b18a0034e3b to before 11eca05d2062032e1f07d56be58ed0b99f4b1d63Affected d07f951903fa9922c375b8ab1ce81b18a0034e3b to before 8b90a47c4fba27bb4f2f086611742493629e9696Affected d07f951903fa9922c375b8ab1ce81b18a0034e3b to before a83488cecb35f924b7541306ed84893bb9906196Affected d07f951903fa9922c375b8ab1ce81b18a0034e3b to before 8b7c3b6914f19caf648d05726a86af6326d3c2c6Affected e78f1a43e72daf77705ad5b9946de66fc708b874Affected 5.10.210 to before 5.10.271Affected 5.15.149 to before 5.15.222Affected 6.1.76 to before 6.1.189Affected 6.6.15 to before 6.6.158Affected 6.7.3 to before 6.8Affected
LinuxLinux	6.8Affected before 6.8Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2.7 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

cd51e26a3b89706beec64f2d8296cfb1c34e0c79 to before 538f00558db9a66aeff20c36f43692c178a0e0ebAffected
a7f580cdb42ec3d53bbb7c4e4335a98423703285 to before 6ab772d675a885c3119bf0e79ea9e84756d7657aAffected
dbc9a791a70ea47be9f2acf251700fe254a2ab23 to before e17b85eb8cee90a1200fa5e7806db7ffa08a0608Affected
d68ac38895e84446848b7647ab9458d54cacba3e to before 991c875310254a13b3a637bb279379c8c66e842dAffected
d07f951903fa9922c375b8ab1ce81b18a0034e3b to before 11eca05d2062032e1f07d56be58ed0b99f4b1d63Affected
d07f951903fa9922c375b8ab1ce81b18a0034e3b to before 8b90a47c4fba27bb4f2f086611742493629e9696Affected
d07f951903fa9922c375b8ab1ce81b18a0034e3b to before a83488cecb35f924b7541306ed84893bb9906196Affected
d07f951903fa9922c375b8ab1ce81b18a0034e3b to before 8b7c3b6914f19caf648d05726a86af6326d3c2c6Affected
e78f1a43e72daf77705ad5b9946de66fc708b874Affected
5.10.210 to before 5.10.271Affected
5.15.149 to before 5.15.222Affected
6.1.76 to before 6.1.189Affected
6.6.15 to before 6.6.158Affected
6.7.3 to before 6.8Affected

LinuxLinux

6.8Affected
before 6.8Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2.7 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.