← All Advisories

CVE-2026-97588

Last refreshed2026-10-03

Status: UPDATED  |  Advisory ID: CVE-2026-97588

Key Details

CVECVE-2026-97588
Affected productsLinux Linux

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux
SubsystemsGeneral OT
SectorsMultiple

What to Know

In the Linux kernel, the following vulnerability has been resolved:

s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly

When hardware persistently returns -EBUSY after exhausting retries,

the error propagates to crypto_finalize_*_request(). The crypto API's

completion wrapper treats -EBUSY as a queueing status and swallows it,

preventing the completion callback from firing. This causes callers

using crypto_wait_req() to block indefinitely.

Translate persistent -EBUSY to -EIO after retry exhaustion to ensure

proper error propagation and callback invocation. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-97588
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-97588