---
id: CVE-2026-31746
title: 's390/zcrypt: Fix memory leak with CCA cards used as accelerator'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/zcrypt: Fix memory leak with CCA cards used as accelerator

  Tests showed that there is a memory leak if CCA cards are used as
  accelerator for clear key RSA request…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 919b3885c293057061af32dfeb0e20bba4f7a378 <
    1650268579e1113b30402dbcca4dba6589a0fccf
  - >-
    Linux >= 57db62a130ce69e6f3a870cf1119d8f860391f97 <
    586222c37d4027dbf60a604fbe820184fee7c1c9
  - >-
    Linux >= 57db62a130ce69e6f3a870cf1119d8f860391f97 <
    ace37bfec3822033e59fff390f2ff99fc96ebe4f
  - >-
    Linux >= 57db62a130ce69e6f3a870cf1119d8f860391f97 <
    c8d46f17c2fc7d25c18e60c008928aecab26184d
  - Linux 6.16
published: '2026-05-01'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:39:47.494Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31746'
references:
  - url: 'https://git.kernel.org/stable/c/1650268579e1113b30402dbcca4dba6589a0fccf'
  - url: 'https://git.kernel.org/stable/c/586222c37d4027dbf60a604fbe820184fee7c1c9'
  - url: 'https://git.kernel.org/stable/c/ace37bfec3822033e59fff390f2ff99fc96ebe4f'
  - url: 'https://git.kernel.org/stable/c/c8d46f17c2fc7d25c18e60c008928aecab26184d'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.04769
ingestedAt: '2026-10-21T12:48:53.656Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/zcrypt: Fix memory leak with CCA cards used as accelerator

Tests showed that there is a memory leak if CCA cards are used as
accelerator for clear key RSA requests (ME and CRT). With the last
rework for the memory allocation the AP messages are allocated by
ap_init_apmsg() but for some reason on two places (ME and CRT) the
older allocation was still in place. So the first allocation simple
was never freed.

## Affected

- `Linux >= 919b3885c293057061af32dfeb0e20bba4f7a378 < 1650268579e1113b30402dbcca4dba6589a0fccf`
- `Linux >= 57db62a130ce69e6f3a870cf1119d8f860391f97 < 586222c37d4027dbf60a604fbe820184fee7c1c9`
- `Linux >= 57db62a130ce69e6f3a870cf1119d8f860391f97 < ace37bfec3822033e59fff390f2ff99fc96ebe4f`
- `Linux >= 57db62a130ce69e6f3a870cf1119d8f860391f97 < c8d46f17c2fc7d25c18e60c008928aecab26184d`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.