{"api_version":"1","generated_at":"2026-10-01T19:48:54+00:00","cve":"CVE-2026-97592","urls":{"html":"https://cve.report/CVE-2026-97592","api":"https://cve.report/api/cve/CVE-2026-97592.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-97592","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-97592"},"summary":{"title":"s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm\n\nIn function ctr_aes_crypt() there is a buffer used to process\nremaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and\nthus could lead to expose of unwanted data. When the buffer is used\nexplicitly scrub it at the end of the code block to avoid exposure of\nmaybe sensitive data.\n\nIn a similar way the function gcm_aes_crypt() hat an error path where\nthe CPACF param block was not scrubbed. Instead of return early now\nthese error paths go to end of function where explicit scrubbing is\ndone. Similar with the buffers which are part of the gcm_sg_walk\nstructs from the variables gw_in and gw_out.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-09-25 11:17:10","updated_at":"2026-09-25 11:17:10"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/11eca05d2062032e1f07d56be58ed0b99f4b1d63","name":"https://git.kernel.org/stable/c/11eca05d2062032e1f07d56be58ed0b99f4b1d63","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/a83488cecb35f924b7541306ed84893bb9906196","name":"https://git.kernel.org/stable/c/a83488cecb35f924b7541306ed84893bb9906196","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/8b7c3b6914f19caf648d05726a86af6326d3c2c6","name":"https://git.kernel.org/stable/c/8b7c3b6914f19caf648d05726a86af6326d3c2c6","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/8b90a47c4fba27bb4f2f086611742493629e9696","name":"https://git.kernel.org/stable/c/8b90a47c4fba27bb4f2f086611742493629e9696","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97592","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97592","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected d07f951903fa9922c375b8ab1ce81b18a0034e3b 11eca05d2062032e1f07d56be58ed0b99f4b1d63 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected d07f951903fa9922c375b8ab1ce81b18a0034e3b 8b90a47c4fba27bb4f2f086611742493629e9696 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected d07f951903fa9922c375b8ab1ce81b18a0034e3b a83488cecb35f924b7541306ed84893bb9906196 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected d07f951903fa9922c375b8ab1ce81b18a0034e3b 8b7c3b6914f19caf648d05726a86af6326d3c2c6 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected cd51e26a3b89706beec64f2d8296cfb1c34e0c79 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected a7f580cdb42ec3d53bbb7c4e4335a98423703285 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected dbc9a791a70ea47be9f2acf251700fe254a2ab23 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected d68ac38895e84446848b7647ab9458d54cacba3e git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e78f1a43e72daf77705ad5b9946de66fc708b874 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.10.210 5.11 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.15.149 5.16 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.1.76 6.2 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.6.15 6.7 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.7.3 6.8 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.8","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.8 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.111 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.53 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.7 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3-rc3 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"97592","cve":"CVE-2026-97592","epss":"0.002000000","percentile":"0.088240000","score_date":"2026-09-27","updated_at":"2026-09-28 00:02:24"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/s390/crypto/aes_s390.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"11eca05d2062032e1f07d56be58ed0b99f4b1d63","status":"affected","version":"d07f951903fa9922c375b8ab1ce81b18a0034e3b","versionType":"git"},{"lessThan":"8b90a47c4fba27bb4f2f086611742493629e9696","status":"affected","version":"d07f951903fa9922c375b8ab1ce81b18a0034e3b","versionType":"git"},{"lessThan":"a83488cecb35f924b7541306ed84893bb9906196","status":"affected","version":"d07f951903fa9922c375b8ab1ce81b18a0034e3b","versionType":"git"},{"lessThan":"8b7c3b6914f19caf648d05726a86af6326d3c2c6","status":"affected","version":"d07f951903fa9922c375b8ab1ce81b18a0034e3b","versionType":"git"},{"status":"affected","version":"cd51e26a3b89706beec64f2d8296cfb1c34e0c79","versionType":"git"},{"status":"affected","version":"a7f580cdb42ec3d53bbb7c4e4335a98423703285","versionType":"git"},{"status":"affected","version":"dbc9a791a70ea47be9f2acf251700fe254a2ab23","versionType":"git"},{"status":"affected","version":"d68ac38895e84446848b7647ab9458d54cacba3e","versionType":"git"},{"status":"affected","version":"e78f1a43e72daf77705ad5b9946de66fc708b874","versionType":"git"},{"lessThan":"5.11","status":"affected","version":"5.10.210","versionType":"semver"},{"lessThan":"5.16","status":"affected","version":"5.15.149","versionType":"semver"},{"lessThan":"6.2","status":"affected","version":"6.1.76","versionType":"semver"},{"lessThan":"6.7","status":"affected","version":"6.6.15","versionType":"semver"},{"lessThan":"6.8","status":"affected","version":"6.7.3","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["arch/s390/crypto/aes_s390.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.111","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.53","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3-rc3","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.111","versionStartIncluding":"6.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.53","versionStartIncluding":"6.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.7","versionStartIncluding":"6.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3-rc3","versionStartIncluding":"6.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.210","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.149","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.76","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.15","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm\n\nIn function ctr_aes_crypt() there is a buffer used to process\nremaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and\nthus could lead to expose of unwanted data. When the buffer is used\nexplicitly scrub it at the end of the code block to avoid exposure of\nmaybe sensitive data.\n\nIn a similar way the function gcm_aes_crypt() hat an error path where\nthe CPACF param block was not scrubbed. Instead of return early now\nthese error paths go to end of function where explicit scrubbing is\ndone. Similar with the buffers which are part of the gcm_sg_walk\nstructs from the variables gw_in and gw_out."}],"providerMetadata":{"dateUpdated":"2026-09-25T10:22:09.305Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/11eca05d2062032e1f07d56be58ed0b99f4b1d63"},{"url":"https://git.kernel.org/stable/c/8b90a47c4fba27bb4f2f086611742493629e9696"},{"url":"https://git.kernel.org/stable/c/a83488cecb35f924b7541306ed84893bb9906196"},{"url":"https://git.kernel.org/stable/c/8b7c3b6914f19caf648d05726a86af6326d3c2c6"}],"title":"s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-97592","datePublished":"2026-09-25T10:22:09.305Z","dateReserved":"2026-09-24T16:01:01.157Z","dateUpdated":"2026-09-25T10:22:09.305Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-25 11:17:10","lastModifiedDate":"2026-09-25 11:17:10","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"97592","Ordinal":"1","Title":"s390/crypto: Fix missing scrub of temp buffers with AES ctr and ","CVE":"CVE-2026-97592","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"97592","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm\n\nIn function ctr_aes_crypt() there is a buffer used to process\nremaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and\nthus could lead to expose of unwanted data. When the buffer is used\nexplicitly scrub it at the end of the code block to avoid exposure of\nmaybe sensitive data.\n\nIn a similar way the function gcm_aes_crypt() hat an error path where\nthe CPACF param block was not scrubbed. Instead of return early now\nthese error paths go to end of function where explicit scrubbing is\ndone. Similar with the buffers which are part of the gcm_sg_walk\nstructs from the variables gw_in and gw_out.","Type":"Description","Title":"s390/crypto: Fix missing scrub of temp buffers with AES ctr and "}]}}}