Buffer Overflow Vulnerability in Linux Kernel Affecting s390/zcrypt

CVE-2026-80545

What is CVE-2026-80545?

The Linux kernel's s390/zcrypt component has a serious vulnerability due to improper input validation in the xcrb_msg_to_type6_ep11cprb_msgx() function. This issue stems from inadequate checks for the size of the ep11_cprb structure and associated payload fields, which are copied from user space without verifying buffer length. Additionally, there's a potential for arithmetic overflow during length calculations, which could lead to buffer overflow conditions. Finally, the function improperly processes ASN.1 encoded payloads using a direct struct overlay, which can further compromise system security. The remediation involves adding appropriate size checks and enhancing payload parsing mechanisms to ensure integrity and secure data handling.

References