{"api_version":"1","generated_at":"2026-10-18T07:54:21+00:00","cve":"CVE-2026-98387","urls":{"html":"https://cve.report/CVE-2026-98387","api":"https://cve.report/api/cve/CVE-2026-98387.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-98387","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-98387"},"summary":{"title":"s390/crypto: Fix skcipher_walk return code handling in aes_s390","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-10-14 14:17:49","updated_at":"2026-10-14 14:17:49"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd","name":"https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28","name":"https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930","name":"https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf","name":"https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98387","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98387","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 89b58645646d1dac34162cc2597f42266bfbf930 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 35c3f97569306050e818fa18e17fa97c358f0f28 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 aea3e1588f08e381a7a57b2bf1a60cc2347904cd git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 15fa028589c3a2545f0bff355eff06d5844196bf git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.5","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.5 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.111 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.53 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.7 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3-rc3 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/s390/crypto/aes_s390.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"89b58645646d1dac34162cc2597f42266bfbf930","status":"affected","version":"7988fb2c03c8cf9936f851ab19a6d21b3c3411c0","versionType":"git"},{"lessThan":"35c3f97569306050e818fa18e17fa97c358f0f28","status":"affected","version":"7988fb2c03c8cf9936f851ab19a6d21b3c3411c0","versionType":"git"},{"lessThan":"aea3e1588f08e381a7a57b2bf1a60cc2347904cd","status":"affected","version":"7988fb2c03c8cf9936f851ab19a6d21b3c3411c0","versionType":"git"},{"lessThan":"15fa028589c3a2545f0bff355eff06d5844196bf","status":"affected","version":"7988fb2c03c8cf9936f851ab19a6d21b3c3411c0","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["arch/s390/crypto/aes_s390.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.111","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.53","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3-rc3","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.111","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.53","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.7","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3-rc3","versionStartIncluding":"5.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code."}],"providerMetadata":{"dateUpdated":"2026-10-14T13:25:51.513Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930"},{"url":"https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28"},{"url":"https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd"},{"url":"https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf"}],"title":"s390/crypto: Fix skcipher_walk return code handling in aes_s390","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-98387","datePublished":"2026-10-14T13:25:51.513Z","dateReserved":"2026-09-25T10:25:14.346Z","dateUpdated":"2026-10-14T13:25:51.513Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-14 14:17:49","lastModifiedDate":"2026-10-14 14:17:49","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"98387","Ordinal":"1","Title":"s390/crypto: Fix skcipher_walk return code handling in aes_s390","CVE":"CVE-2026-98387","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"98387","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code.","Type":"Description","Title":"s390/crypto: Fix skcipher_walk return code handling in aes_s390"}]}}}