Medium 5.5Published May 1, 2026

CVE-2026-31746s390/zcrypt: Fix memory leak with CCA cards used as accelerator

Updated under an hour ago (Oct 27, 2026, 9:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix memory leak with CCA cards used as accelerator Tests showed that there is a memory leak if CCA cards are used as accelerator for clear key RSA requests (ME and CRT). With the last rework for the memory allocation the AP messages are allocated by ap_init_apmsg() but for some reason on two places (ME and CRT) the older allocation was still in place. So the first allocation simple was never freed.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 919b3885c293057061af32dfeb0e20bba4f7a378 before 1650268579e1113b30402dbcca4dba6589a0fccf; from 57db62a130ce69e6f3a870cf1119d8f860391f97 before 586222c37d4027dbf60a604fbe820184fee7c1c9; from 57db62a130ce69e6f3a870cf1119d8f860391f97 before ace37bfec3822033e59fff390f2ff99fc96ebe4f; from 57db62a130ce69e6f3a870cf1119d8f860391f97 before c8d46f17c2fc7d25c18e60c008928aecab26184d	CNA record
linux linux_kernel linux:linux_kernel	from 6.16 before 6.18.22; from 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/1650268579e1113b30402dbcca4dba6589a0fccf
https://git.kernel.org/stable/c/586222c37d4027dbf60a604fbe820184fee7c1c9	patch
https://git.kernel.org/stable/c/ace37bfec3822033e59fff390f2ff99fc96ebe4f	patch
https://git.kernel.org/stable/c/c8d46f17c2fc7d25c18e60c008928aecab26184d	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.