---
id: CVE-2026-98387
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/crypto: Fix skcipher_walk return code handling in aes_s390

  The return codes from skcipher_walk_virt() were not properly checked
  before entering the processing loo…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/crypto: Fix skcipher_walk return code handling in aes_s390

  The return codes from skcipher_walk_virt() were not properly checked
  before entering the processing loo…
severity: medium
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T14:17:49.510'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98387'
references:
  - url: 'https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98387.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98387'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2552219'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98387'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98387'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98387.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-10-14T15:36:13.975Z'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 <
    89b58645646d1dac34162cc2597f42266bfbf930
  - >-
    Linux >= 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 <
    35c3f97569306050e818fa18e17fa97c358f0f28
  - >-
    Linux >= 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 <
    aea3e1588f08e381a7a57b2bf1a60cc2347904cd
  - >-
    Linux >= 7988fb2c03c8cf9936f851ab19a6d21b3c3411c0 <
    15fa028589c3a2545f0bff355eff06d5844196bf
  - Linux 5.5
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-908
epss: 0.002
epssPercentile: 0.09778
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix skcipher_walk return code handling in aes_s390

The return codes from skcipher_walk_virt() were not properly checked
before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().
If skcipher_walk_virt() fails, the walk structure may be in an undefined
state, and attempting to process data could lead to incorrect behavior
or accessing uninitialized memory.

Add proper return code checking to ensure correct handling of the walk
initialization and walk advance and eventually return to the caller
with that return code.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98387.json)