CVE-2026-68385
- Source
- https://cve.org/CVERecord?id=CVE-2026-68385
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68385.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-68385
- Downstream
- Published
- 2026-08-10T12:04:04.281Z
- Modified
- 2026-08-12T04:18:48.266180367Z
- Summary
- s390/checksum: Fix csum_partial() without vector facility
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
s390/checksum: Fix csum_partial() without vector facility
Currently csumpartial() calls csumcopy() with copy=false and dst=NULL. On machines without the vector facility, csum_copy() falls back to cksm(dst, ...), causing the checksum to be calculated from address zero instead of the source buffer.
The VX implementation already checksums data loaded from src. Make the fallback do the same by passing src to cksm().
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68385.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722
- https://git.kernel.org/stable/c/4bb06b60d982355e22647b3d12d6619419f8c1fa
- https://git.kernel.org/stable/c/5fc0a2a6eeb99cac991242bb48796c7749ce3261
- https://git.kernel.org/stable/c/898bb2814f38399108bdd2113f38d97383a7036a
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68385.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-68385
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddcd3e1de9d17dc43dfed87a9fc814b9dec508043Fixed5fc0a2a6eeb99cac991242bb48796c7749ce3261Fixed1d9a2f01b3c4e5c88e06b2db4b5460c2ec884722Fixed898bb2814f38399108bdd2113f38d97383a7036aFixed4bb06b60d982355e22647b3d12d6619419f8c1fa