CVE-2026-97591

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97591", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-24T16:01:01.157Z", "datePublished": "2026-09-25T10:22:08.694Z", "dateUpdated": "2026-10-19T09:09:55.087Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:09:55.087Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine\n\nWhen a request is transferred to the engine via\ncrypto_transfer_hash_request_to_engine() there are two return codes\nsignaling a successful transfer: EINPROGRESS and EBUSY. However the\ncorrect handling of EBUSY was missing and has been added as a return\ncode indicating a successful transfer to the crypto engine."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/s390/crypto/phmac_s390.c"], "versions": [{"version": "cbbc675506cc4cd93e6f895e7c1f693156f9a95c", "lessThan": "203702f0013f9b7324e8c5facb6cd6e9c0942b13", "status": "affected", "versionType": "git"}, {"version": "cbbc675506cc4cd93e6f895e7c1f693156f9a95c", "lessThan": "bcd7f1f1e2f2882ad206f72425255be105178151", "status": "affected", "versionType": "git"}, {"version": "cbbc675506cc4cd93e6f895e7c1f693156f9a95c", "lessThan": "330148371401de474b656eaf521861f12ec1a1ce", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/s390/crypto/phmac_s390.c"], "versions": [{"version": "6.17", "status": "affected"}, {"version": "0", "lessThan": "6.17", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/203702f0013f9b7324e8c5facb6cd6e9c0942b13"}, {"url": "https://git.kernel.org/stable/c/bcd7f1f1e2f2882ad206f72425255be105178151"}, {"url": "https://git.kernel.org/stable/c/330148371401de474b656eaf521861f12ec1a1ce"}], "title": "s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/s390/crypto/phmac_s390.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "203702f0013f9b7324e8c5facb6cd6e9c0942b13", "status": "affected", "version": "cbbc675506cc4cd93e6f895e7c1f693156f9a95c", "versionType": "git"}, {"lessThan": "bcd7f1f1e2f2882ad206f72425255be105178151", "status": "affected", "version": "cbbc675506cc4cd93e6f895e7c1f693156f9a95c", "versionType": "git"}, {"lessThan": "330148371401de474b656eaf521861f12ec1a1ce", "status": "affected", "version": "cbbc675506cc4cd93e6f895e7c1f693156f9a95c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/s390/crypto/phmac_s390.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"lessThan": "6.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine\n\nWhen a request is transferred to the engine via\ncrypto_transfer_hash_request_to_engine() there are two return codes\nsignaling a successful transfer: EINPROGRESS and EBUSY. However the\ncorrect handling of EBUSY was missing and has been added as a return\ncode indicating a successful transfer to the crypto engine."}], "id": "CVE-2026-97591", "lastModified": "2026-10-19T10:17:28.590", "metrics": {}, "published": "2026-09-25T11:17:10.313", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/203702f0013f9b7324e8c5facb6cd6e9c0942b13"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/330148371401de474b656eaf521861f12ec1a1ce"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bcd7f1f1e2f2882ad206f72425255be105178151"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine", "id": "2541161", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541161"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-394", "details": ["A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC (PHMAC) operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests during high load, prompting the driver to prematurely clear memory structures while requests are still in progress. This improper cleanup can lead to memory corruption or a system crash, resulting in a Denial of Service (DoS)."], "name": "CVE-2026-97591", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97591\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97591\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97591.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cbbc675506cc4cd93e6f895e7c1f693156f9a95c,203702f0013f9b7324e8c5facb6cd6e9c0942b13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cbbc675506cc4cd93e6f895e7c1f693156f9a95c,bcd7f1f1e2f2882ad206f72425255be105178151)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cbbc675506cc4cd93e6f895e7c1f693156f9a95c,330148371401de474b656eaf521861f12ec1a1ce)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.17"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.17)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.3-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T13:45:18.892055+00:00", "updated": "2026-10-01T11:00:06.066119+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}