CVE-2026-97590 Linux CVE debrief

Who should care

Linux kernel maintainers, users, and administrators should assess exposure and prioritize verification of affected systems, especially those using the PAES algorithm. They should review Linux kernel configurations and versions to determine exposure and consider scrubbing temporary buffers in cryptographic functions to prevent potential sensitive data exposure.

Why it matters

A vulnerability in the Linux kernel's s390/crypto implementation has been addressed, but specific affected versions and exploitation details are not provided, requiring verification and patching.

• Potential exposure of sensitive data
• Need for verification of affected systems
• Priority for Linux kernel updates and patches

Technical summary

The Linux kernel's s390/crypto implementation had a vulnerability where temporary buffers used in the PAES algorithm were not properly scrubbed. This could potentially expose sensitive data. The issue has been resolved by explicitly scrubbing the buffers at the end of the ctr_paes_do_crypt function and cleaning the whole param block in the __xts_2keys_prep_param function. Linux kernel maintainers and users should assess exposure and prioritize verification of affected systems, especially those using the PAES algorithm, to prevent potential sensitive data exposure.

Defensive priority

Linux kernel maintainers and users should assess exposure and prioritize verification of affected systems, especially those using the PAES algorithm.

Recommended defensive actions

• Review and verify Linux kernel configurations and versions to determine exposure
• Scrub temporary buffers in cryptographic functions
• Monitor for potential sensitive data exposure
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in the Linux kernel's s390/crypto implementation, specifically regarding the PAES algorithm's temporary buffers not being properly scrubbed. However, specific affected versions and exploitation details are not provided, requiring verification and patching by Linux kernel maintainers and users. To verify exposure, defenders should review Linux kernel configurations and versions, focusing on those using the PAES algorithm. The CVE Program record (CVE-2026-97590) and NVD (

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.