Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.13%

Risk score

2.2

Published

2026-08-13

Status

Published

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.

Coverage 1

threat-intel

Multiples vulnérabilités dans le noyau Linux de Debian (28 août 2026)

Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…

CERT-FR · 5d ago CriticalCVSS 9.8

CVE-2025-38525CVE-2025-40054CVE-2026-43197vulnerabilitylinuxdebian

All articles mentioning it

Advisories and references

• git.kernel.org/stable/c/be037204e4f595e4bd2159acda146677a1dc6342
• git.kernel.org/stable/c/4e500ecb6704d879f9c2417c2ed6faba595015ca
• git.kernel.org/stable/c/7f9e5a3dbb14a9b321a1dfa30390402c673f82dc
• git.kernel.org/stable/c/406b317ea2b501f6f5eca1264293c9399a73a778
• git.kernel.org/stable/c/4fc46deceda076d429ef3fab2ccf8d96629ebd23
• git.kernel.org/stable/c/ad93a1f1a45652478c0cf4eb029114e03af57f3b
• git.kernel.org/stable/c/3859f630b674801a00bca39bc451f52288591f65
• git.kernel.org/stable/c/06afe425d5283b9764303de47f554da5a808ce8a