Get real-time updates on Telegram
CVE-2026-68453: Linux 5.4
CVE-2026-68453. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.00127 (percentile 0.0209), scored 15-Oct-2026.
Affected technology
Linux · 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to before a57fd7fcdb63e2d5ceac78bbe825ec986062a9da, 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to before 3b2abee2a678607ae27975bc6833785c2002df43, 4bc123b18ce6ae6c42c69d0456b5acbd2f7bc8bd to before 36b230835b8a008266aad22168ca52afacc8a58d
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: drivers/s390/crypto/pkey_cca.c, drivers/s390/crypto/zcrypt_ccamisc.c, drivers/s390/crypto/zcrypt_ccamisc.h
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
An attacker could set this field larger than the actual buffer size, leading to reading beyond buffer boundaries. Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none.
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.00127 · percentile 0.0209 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-68453.html