In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey()… (CVE-2026-68451)
A vulnerability in the Linux kernel's s390/zcrypt component related to CCA ECC private key requests has been resolved. The function cca_ecc2protkey() improperly derived the copy length for the CPRB parameter block directly from the length field in the key token without validating it. This could lead to processing requests with token lengths exceeding the available space, which is now rejected early to prevent issues.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-68451 concerns the s390/zcrypt module's handling of CCA ECC private key requests. Specifically, the cca_ecc2protkey() function used the length field from the key token to determine the copy length for the CPRB parameter block without validating that this length did not exceed the available space. The fix involves adding validation to reject requests where the token length is too large, preventing potential memory corruption or related issues.
Potential Impact
Improper validation of the token length in private key requests could lead to memory corruption or other unexpected behavior in the kernel's cryptographic processing. The exact impact is not detailed in the provided data, but such issues typically risk kernel stability or security. No known exploits are reported in the wild.
Mitigation Recommendations
This vulnerability has been resolved in the Linux kernel by adding validation to reject requests with token lengths exceeding the available space. Users should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the input; therefore, check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey()… (CVE-2026-68451)
Description
A vulnerability in the Linux kernel's s390/zcrypt component related to CCA ECC private key requests has been resolved. The function cca_ecc2protkey() improperly derived the copy length for the CPRB parameter block directly from the length field in the key token without validating it. This could lead to processing requests with token lengths exceeding the available space, which is now rejected early to prevent issues.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-68451 concerns the s390/zcrypt module's handling of CCA ECC private key requests. Specifically, the cca_ecc2protkey() function used the length field from the key token to determine the copy length for the CPRB parameter block without validating that this length did not exceed the available space. The fix involves adding validation to reject requests where the token length is too large, preventing potential memory corruption or related issues.
Potential Impact
Improper validation of the token length in private key requests could lead to memory corruption or other unexpected behavior in the kernel's cryptographic processing. The exact impact is not detailed in the provided data, but such issues typically risk kernel stability or security. No known exploits are reported in the wild.
Mitigation Recommendations
This vulnerability has been resolved in the Linux kernel by adding validation to reject requests with token lengths exceeding the available space. Users should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the input; therefore, check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4fv3-cqpg-5v3h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68451"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a7e0350bf8831d5398f6f4a
Added to database: 08/13/2026, 17:48:00 UTC
Last enriched: 08/13/2026, 17:53:17 UTC
Last updated: 08/13/2026, 17:53:17 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.