CVE-2026-80543

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/zcrypt: Pad trailing CCA or EP11 message with zeros<br /> <br /> The both functions xcrb_msg_to_type6cprb_msgx() and<br /> xcrb_msg_to_type6_ep11cprb_msgx() copy the user space message into a<br /> kernel buffer based on the message length. But on further processing<br /> the message is supposed to be 4 byte length adjusted. Thus up to 3<br /> bytes of uninitialized kernel memory are forwarded to further<br /> processing steps and may unwanted expose kernel memory to the crypto<br /> card firmware.<br /> <br /> This patch contains code to pad the gap between user space copied<br /> message and message buffer length sent down to further processing of<br /> the CCA or EP11 message to zeros.