CVE-2026-97589
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/09/2026
Última modificación:
25/09/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
s390/crypto: Fix wrong return code to engine in asynch callbacks<br />
<br />
When crypto_finalize_hash_request() or<br />
crypto_finalize_skcipher_request() explicitly completes a request, the<br />
do_one_request callback must return 0 to indicate successful<br />
handling. Returning a negative error code causes the crypto engine to<br />
assume the driver failed to take ownership and triggers a second<br />
completion via crypto_request_complete(), resulting in a double<br />
completion. This pattern occurs in paes_s390.c 4 times and once in<br />
phmac_s390.c.<br />
<br />
Fixed in phmac_do_one_request() and all four paes do_one_request<br />
callbacks (ecb, cbc, ctr, xts) by returning 0 after explicit<br />
finalization instead of propagating the error code.
Impacto
Puntuación base 3.x
7.00
Gravedad 3.x
ALTA


