CVE-2026-97591: linux
Vulnerability summary
CVE-2026-97591 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 25-09-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred to the engine via crypto_transfer_hash_request_to_engine() there are two return codes signaling a successful transfer: EINPROGRESS and EBUSY. However the correct handling of EBUSY was missing and has been added as a return code indicating a successful transfer to the crypto engine.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu120 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 7.2.7-1
Linux1 product
- linux≥ cbbc675506cc4cd93e6f895e7c1f693156f9a95c, < 203702f0013f9b7324e8c5facb6cd6e9c0942b13 | ≥ cbbc675506cc4cd93e6f895e7c1f693156f9a95c, < bcd7f1f1e2f2882ad206f72425255be105178151 | ≥ cbbc675506cc4cd93e6f895e7c1f693156f9a95c, < 330148371401de474b656eaf521861f12ec1a1ce | 6.17
3 vendors · 122 products