CVE-2026-98387

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98387", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.346Z", "datePublished": "2026-10-14T13:25:51.513Z", "dateUpdated": "2026-10-19T09:18:38.225Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:18:38.225Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/s390/crypto/aes_s390.c"], "versions": [{"version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "lessThan": "89b58645646d1dac34162cc2597f42266bfbf930", "status": "affected", "versionType": "git"}, {"version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "lessThan": "35c3f97569306050e818fa18e17fa97c358f0f28", "status": "affected", "versionType": "git"}, {"version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "lessThan": "aea3e1588f08e381a7a57b2bf1a60cc2347904cd", "status": "affected", "versionType": "git"}, {"version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "lessThan": "15fa028589c3a2545f0bff355eff06d5844196bf", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/s390/crypto/aes_s390.c"], "versions": [{"version": "5.5", "status": "affected"}, {"version": "0", "lessThan": "5.5", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930"}, {"url": "https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28"}, {"url": "https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd"}, {"url": "https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf"}], "title": "s390/crypto: Fix skcipher_walk return code handling in aes_s390", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["arch/s390/crypto/aes_s390.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "89b58645646d1dac34162cc2597f42266bfbf930", "status": "affected", "version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "versionType": "git"}, {"lessThan": "35c3f97569306050e818fa18e17fa97c358f0f28", "status": "affected", "version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "versionType": "git"}, {"lessThan": "aea3e1588f08e381a7a57b2bf1a60cc2347904cd", "status": "affected", "version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "versionType": "git"}, {"lessThan": "15fa028589c3a2545f0bff355eff06d5844196bf", "status": "affected", "version": "7988fb2c03c8cf9936f851ab19a6d21b3c3411c0", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["arch/s390/crypto/aes_s390.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.5"}, {"lessThan": "5.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code."}], "id": "CVE-2026-98387", "lastModified": "2026-10-19T10:18:42.043", "metrics": {}, "published": "2026-10-14T14:17:49.510", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390", "id": "2552219", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552219"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-908", "details": ["A flaw was found in the Linux kernel's s390 cryptographic subsystem. Missing error code verification during AES (Advanced Encryption Standard) cipher operations allows data processing loops to execute even if setup fails. A local user could exploit this vulnerability during cryptographic operations to cause the system to access uninitialized memory, leading to a Denial of Service (DoS) via a kernel crash or potential information disclosure."], "name": "CVE-2026-98387", "public_date": "2026-10-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98387\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98387\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98387.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7988fb2c03c8cf9936f851ab19a6d21b3c3411c0,89b58645646d1dac34162cc2597f42266bfbf930)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7988fb2c03c8cf9936f851ab19a6d21b3c3411c0,35c3f97569306050e818fa18e17fa97c358f0f28)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7988fb2c03c8cf9936f851ab19a6d21b3c3411c0,aea3e1588f08e381a7a57b2bf1a60cc2347904cd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7988fb2c03c8cf9936f851ab19a6d21b3c3411c0,15fa028589c3a2545f0bff355eff06d5844196bf)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.5"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.5)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.111,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.53,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2.7,7.2.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-15T05:15:14.984883+00:00", "updated": "2026-10-19T16:45:16.731745+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-908"]}