一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月16日

CVE-2026-98387 – In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skci

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix skcipher_walk return code handling in aes_s390

The return codes from skcipher_walk_virt() were not properly checked
before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().
If skcipher_walk_virt() fails, the walk structure may be in an undefined
state, and attempting to process data could lead to incorrect behavior
or accessing uninitialized memory.

Add proper return code checking to ensure correct handling of the walk
initialization and walk advance and eventually return to the caller
with that return code.