Skip to main content
← All vulnerabilities
CVE-2026-97588

s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.18.53, 7.2.7
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly When hardware persistently returns -EBUSY after exhausting retries, the error propagates to crypto_finalize_*_request(). The crypto API's completion wrapper treats -EBUSY as a queueing status and swallows it, preventing the completion callback from firing. This causes callers using crypto_wait_req() to block indefinitely. Translate persistent -EBUSY to -EIO after retry exhaustion to ensure proper error propagation and callback invocation.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 · fixed in f6b263679aa72ad2e534bf93db55f2589549a40e; From 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 · fixed in e267bd142664a181474112392aeaa8b3d4b12f2e; From 6cd87cb5ef6ca50ae17c371482ceaab1d635e232 · fixed in 7a08507ea5b4d06ad8d269287913573f34467565

  • Linux Linux

    6.16

  • KernelLinux

    From 6.16.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7

References 3

git.kernel.org