Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-97589

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/09/2026
Última modificación:
25/09/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/crypto: Fix wrong return code to engine in asynch callbacks<br /> <br /> When crypto_finalize_hash_request() or<br /> crypto_finalize_skcipher_request() explicitly completes a request, the<br /> do_one_request callback must return 0 to indicate successful<br /> handling. Returning a negative error code causes the crypto engine to<br /> assume the driver failed to take ownership and triggers a second<br /> completion via crypto_request_complete(), resulting in a double<br /> completion. This pattern occurs in paes_s390.c 4 times and once in<br /> phmac_s390.c.<br /> <br /> Fixed in phmac_do_one_request() and all four paes do_one_request<br /> callbacks (ecb, cbc, ctr, xts) by returning 0 after explicit<br /> finalization instead of propagating the error code.