CVE-2026-98387

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Fix skcipher_walk return code handling in aes_s390

The return codes from skcipher_walk_virt() were not properly checked

before entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().

If skcipher_walk_virt() fails, the walk structure may be in an undefined

state, and attempting to process data could lead to incorrect behavior

or accessing uninitialized memory.

Add proper return code checking to ensure correct handling of the walk

initialization and walk advance and eventually return to the caller

with that return code.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References