Re: [PATCH v1 0/2] s390/zcrypt: Validate length in CCA key requests

[Vasily Gorbik <gor@linux.ibm.com>]

On Wed, Jul 29, 2026 at 11:36:14AM +0200, Holger Dengler wrote:
> The series contains two missing length field validations for requests
> with CCA AES cipher keys and CCA ECC private keys. In both cases, the
> length information is used to copy the payload to the request block
> without checking the available space. Malformed requests can so cause
> out-of-band writes on the heap.
> 
> This series applies on top of Linus' master branch.
> 
> Holger Dengler (2):
>   s390/zcrypt: Validate length for CCA AES cipher key requests
>   s390/zcrypt: Validate length for CCA ECC private key requests
> 
>  drivers/s390/crypto/zcrypt_ccamisc.c | 6 ++++++
>  1 file changed, 6 insertions(+)

Applied, thank you!