CVE-2026-80708 (GCVE-0-2026-80708)

Vulnerability from cvelistv5 – Published: 2026-08-28 06:53 – Updated: 2026-08-28 06:53
VLAI
Title
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() The helper function _ip_cprb_helper() uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead to leaving for example clear key material in memory which could be exposed via tricky reuse of this same memory. Extend the _ip_cprb_helper() function with another parameter 'scrub' used to steer scrubbing of this buffer. So now the caller has the opportunity to decide if scrubbing is needed or not. Extend the clear key to secure key token import process in function cca_clr2cipherkey() to tell the helper function from above to scrub the cprb buffer when the clear key value is part of the request data. Add explicit scrubbing on return from function cca_clr2cipherkey() for the random EXOR buffer and the cprb buffer. Overall this cleans the internal used buffer in case of clear key import to prevent sensitive data to get exposed.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < 8e1c0def77b7450be0ed607ed0d7bae629d30020 (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < be7ae07fb745d1cf575b03a178a055b0a2859364 (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < 4e26d0d72bfdec311f12acfa0c6b7fbeb6a343d3 (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < 7dd6e556dbfc91d3d511cfd1015d2dad42608010 (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < b453003ae6a869f5bdf025b5519cbb38295ae4f1 (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < fbb0410986e8ad214121e51a4a28c3d0a10b7644 (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < ebfbb9ac7adbb1e3556100b54a27e8a9b102feac (git)
Affected: 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd , < 01476391aecef36a3b789ee844357b22fbc90665 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.4
Unaffected: 0 , < 5.4 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.152 , ≤ 6.6.* (semver)
Unaffected: 6.12.104 , ≤ 6.12.* (semver)
Unaffected: 6.18.44 , ≤ 6.18.* (semver)
Unaffected: 7.1.8 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/crypto/zcrypt_ccamisc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8e1c0def77b7450be0ed607ed0d7bae629d30020",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "be7ae07fb745d1cf575b03a178a055b0a2859364",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "4e26d0d72bfdec311f12acfa0c6b7fbeb6a343d3",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "7dd6e556dbfc91d3d511cfd1015d2dad42608010",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "b453003ae6a869f5bdf025b5519cbb38295ae4f1",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "fbb0410986e8ad214121e51a4a28c3d0a10b7644",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "ebfbb9ac7adbb1e3556100b54a27e8a9b102feac",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            },
            {
              "lessThan": "01476391aecef36a3b789ee844357b22fbc90665",
              "status": "affected",
              "version": "4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/crypto/zcrypt_ccamisc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.152",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.104",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.152",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.104",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.44",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.8",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()\n\nThe helper function _ip_cprb_helper() uses internal buffer memory for\nbuilding and processing CPRBs. After use this buffer was never\nscrubbed which could lead to leaving for example clear key material in\nmemory which could be exposed via tricky reuse of this same memory.\n\nExtend the _ip_cprb_helper() function with another parameter \u0027scrub\u0027\nused to steer scrubbing of this buffer. So now the caller has the\nopportunity to decide if scrubbing is needed or not.\n\nExtend the clear key to secure key token import process in function\ncca_clr2cipherkey() to tell the helper function from above to scrub\nthe cprb buffer when the clear key value is part of the request data.\n\nAdd explicit scrubbing on return from function cca_clr2cipherkey() for\nthe random EXOR buffer and the cprb buffer.\n\nOverall this cleans the internal used buffer in case of clear key\nimport to prevent sensitive data to get exposed."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-28T06:53:08.843Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8e1c0def77b7450be0ed607ed0d7bae629d30020"
        },
        {
          "url": "https://git.kernel.org/stable/c/be7ae07fb745d1cf575b03a178a055b0a2859364"
        },
        {
          "url": "https://git.kernel.org/stable/c/4e26d0d72bfdec311f12acfa0c6b7fbeb6a343d3"
        },
        {
          "url": "https://git.kernel.org/stable/c/7dd6e556dbfc91d3d511cfd1015d2dad42608010"
        },
        {
          "url": "https://git.kernel.org/stable/c/b453003ae6a869f5bdf025b5519cbb38295ae4f1"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbb0410986e8ad214121e51a4a28c3d0a10b7644"
        },
        {
          "url": "https://git.kernel.org/stable/c/ebfbb9ac7adbb1e3556100b54a27e8a9b102feac"
        },
        {
          "url": "https://git.kernel.org/stable/c/01476391aecef36a3b789ee844357b22fbc90665"
        }
      ],
      "title": "s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-80708",
    "datePublished": "2026-08-28T06:53:08.843Z",
    "dateReserved": "2026-08-26T14:34:25.787Z",
    "dateUpdated": "2026-08-28T06:53:08.843Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-80708",
      "date": "2026-08-28",
      "epss": "0.00164",
      "percentile": "0.05888"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-80708\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-28T08:16:56.397\",\"lastModified\":\"2026-08-28T08:16:56.397\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()\\n\\nThe helper function _ip_cprb_helper() uses internal buffer memory for\\nbuilding and processing CPRBs. After use this buffer was never\\nscrubbed which could lead to leaving for example clear key material in\\nmemory which could be exposed via tricky reuse of this same memory.\\n\\nExtend the _ip_cprb_helper() function with another parameter \u0027scrub\u0027\\nused to steer scrubbing of this buffer. So now the caller has the\\nopportunity to decide if scrubbing is needed or not.\\n\\nExtend the clear key to secure key token import process in function\\ncca_clr2cipherkey() to tell the helper function from above to scrub\\nthe cprb buffer when the clear key value is part of the request data.\\n\\nAdd explicit scrubbing on return from function cca_clr2cipherkey() for\\nthe random EXOR buffer and the cprb buffer.\\n\\nOverall this cleans the internal used buffer in case of clear key\\nimport to prevent sensitive data to get exposed.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/s390/crypto/zcrypt_ccamisc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"8e1c0def77b7450be0ed607ed0d7bae629d30020\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"be7ae07fb745d1cf575b03a178a055b0a2859364\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"4e26d0d72bfdec311f12acfa0c6b7fbeb6a343d3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"7dd6e556dbfc91d3d511cfd1015d2dad42608010\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"b453003ae6a869f5bdf025b5519cbb38295ae4f1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"fbb0410986e8ad214121e51a4a28c3d0a10b7644\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"ebfbb9ac7adbb1e3556100b54a27e8a9b102feac\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd\",\"lessThan\":\"01476391aecef36a3b789ee844357b22fbc90665\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/s390/crypto/zcrypt_ccamisc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.265\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.216\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.183\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.152\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.104\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.44\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.8\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/01476391aecef36a3b789ee844357b22fbc90665\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4e26d0d72bfdec311f12acfa0c6b7fbeb6a343d3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7dd6e556dbfc91d3d511cfd1015d2dad42608010\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8e1c0def77b7450be0ed607ed0d7bae629d30020\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b453003ae6a869f5bdf025b5519cbb38295ae4f1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/be7ae07fb745d1cf575b03a178a055b0a2859364\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ebfbb9ac7adbb1e3556100b54a27e8a9b102feac\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fbb0410986e8ad214121e51a4a28c3d0a10b7644\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.