CVE-2026-80708

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()<br /> <br /> The helper function _ip_cprb_helper() uses internal buffer memory for<br /> building and processing CPRBs. After use this buffer was never<br /> scrubbed which could lead to leaving for example clear key material in<br /> memory which could be exposed via tricky reuse of this same memory.<br /> <br /> Extend the _ip_cprb_helper() function with another parameter &amp;#39;scrub&amp;#39;<br /> used to steer scrubbing of this buffer. So now the caller has the<br /> opportunity to decide if scrubbing is needed or not.<br /> <br /> Extend the clear key to secure key token import process in function<br /> cca_clr2cipherkey() to tell the helper function from above to scrub<br /> the cprb buffer when the clear key value is part of the request data.<br /> <br /> Add explicit scrubbing on return from function cca_clr2cipherkey() for<br /> the random EXOR buffer and the cprb buffer.<br /> <br /> Overall this cleans the internal used buffer in case of clear key<br /> import to prevent sensitive data to get exposed.