CVE-2026-80709Medium· 5.5▾ SunlitA flaw was found in the Linux kernel's s390/zcrypt component. An incorrect upper limit check for the domain value when processing an EP11 Cryptographic Coprocessor Request Block (CPRB) can allow a local user on custom device nodes to acces…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the vendor's CSAF advisory record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
7.8 → 5.5
high → medium
A flaw was found in the Linux kernel's s390/zcrypt component. An incorrect upper limit check for the domain value when processing an EP11 Cryptographic Coprocessor Request Block (CPRB) can allow a local user on custom device nodes to access heap memory. This could lead to information disclosure or other memory corruption related issues.
kernel: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs — rated Moderate by Red Hat. Released 2026-08-28, updated 2026-10-17.
Affected:
No fix planned:
Not affected:
Fix deferred
Workarounds / mitigations:
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-54116High· 7.8In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bounds access The fbdev test of IGT may write after EOF, which lead to out-of-bound access for drm drivers with fbdev-gene…
CVE-2026-72301High· 7.0kernel: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (CVE-2026-72301)
CVE-2026-64539High· 7.0kernel: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD (CVE-2026-64539)
CVE-2026-98487Medium· 5.5kernel: net: bridge: mdb: restart port group walk after deletion (CVE-2026-98487)
CVE-2026-72113Medium· 4.7kernel: can: bcm: add missing device refcount for CAN filter removal (CVE-2026-72113)
CVE-2026-72136Medium· 6.1kernel: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72136)