Search: CVE-2026-68452

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.1%	CVE-2026-68452Linux kernel · Buffer Overflow High7.8EPSS 0.1%2026-08-13CVE Database V5CVE-2026-68452 CVE-2026-68452 is a high-severity vulnerability in the Linux kernel's s390/zcrypt component involving improper validation of AES cipher key request lengths. The function cca_cipher2protkey() incorrectly derives the copy length for the CPRB parameter block from the key token length without sufficient checks, potentially leading to memory corruption. This flaw has been fixed by rejecting requests where the token length exceeds the available parameter block space. EPSS 0.1%Vulnerability CWE-120	CVE Database V5	2026-08-13

Page 1 of 1 · 2 duplicate CVE records merged