CVE-2026-68385
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
17/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
s390/checksum: Fix csum_partial() without vector facility<br />
<br />
Currently csum_partial() calls csum_copy() with copy=false and dst=NULL.<br />
On machines without the vector facility, csum_copy() falls back to<br />
cksm(dst, ...), causing the checksum to be calculated from address zero<br />
instead of the source buffer.<br />
<br />
The VX implementation already checksums data loaded from src. Make the<br />
fallback do the same by passing src to cksm().
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL