CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel affects the s390/zcrypt component, specifically in the handling of CCA ECC private key requests. The flaw allows for the potential overflow of the CPRB parameter block if the token length exceeds the allocated space, which could lead to memory corruption or unauthorized access to sensitive data. Organizations utilizing Linux on s390 architecture should prioritize this issue to mitigate risks associated with cryptographic operations.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length exceeds the available space in the parameter block.