The vulnerability arises in the s390/zcrypt subsystem of the Linux kernel where the function responsible for handling ECC private key requests derives the amount of data to copy directly from a length field supplied by the key token. If the supplied length exceeds the actual space allocated for the request’s parameter block, the kernel copies data beyond the intended bounds. This unchecked copy can corrupt kernel memory. The CVE does not specify the exact consequences such as crashes or privilege escalation; this is an inference based on the nature of the overflow.

All versions of the Linux kernel that include the s390/zcrypt module and lack the validation patch are affected. The vulnerability applies to Linux kernel builds for the s390 architecture regardless of distribution or configuration, as indicated by the general cpe:2.3:o:linux:linux_kernel:* entry. No specific vendor product versions are listed, so any kernel that has not been updated to include the fix is potentially vulnerable.

Because the flaw allows uncontrolled copying beyond a buffer, the risk is high. The CVSS score of 7.8 indicates high severity. EPSS data is not available and the vulnerability is not listed in CISA KEV. An attacker would need to supply a malformed ECC private key token to trigger the vulnerable kernel path locally, typically by interacting with the kernel’s cryptographic API. No public exploit has been disclosed. The CVE does not detail the impact beyond potential memory corruption, so any outcomes such as crashes or privilege escalation are inferred from the type of overflow.