Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-80543

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
26/08/2026
Última modificación:
26/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/zcrypt: Pad trailing CCA or EP11 message with zeros<br /> <br /> The both functions xcrb_msg_to_type6cprb_msgx() and<br /> xcrb_msg_to_type6_ep11cprb_msgx() copy the user space message into a<br /> kernel buffer based on the message length. But on further processing<br /> the message is supposed to be 4 byte length adjusted. Thus up to 3<br /> bytes of uninitialized kernel memory are forwarded to further<br /> processing steps and may unwanted expose kernel memory to the crypto<br /> card firmware.<br /> <br /> This patch contains code to pad the gap between user space copied<br /> message and message buffer length sent down to further processing of<br /> the CCA or EP11 message to zeros.

Impacto