CVE-2026-68451

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

Upwind Security MDR@UpwindMDR1d
🚨High - Linux s390 zcrypt CCA ECC token length heap OOB write (CVE-2026-68451) Linux kernel s390 zcrypt CCA ECC handling lets a crafted private key token control the length copied into the CPRB parameter block; an oversized token triggers a kernel heap out-of-bounds write during copy, leading to memory corruption, potential LPE/data leak, or panic. Non-s390 systems aren’t impacted. 👉Affected: linux / linux-aws / linux-gcp / linux-ibm / linux-oracle (s390 zcrypt)
0000077
386 followersView on X

Explore more

Back to dashboard