Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23060

crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than the minimum expected length, crypto_authenc_esn_decrypt() can advance past the end of the destination scatterlist and trigger a NULL pointer dereference in scatterwalk_map_and_copy(), leading to a kernel panic (DoS). Add a minimum AAD length check to fail fast on invalid inputs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < df22c9a65e9a9daa368a72fed596af9d7d5876bbaffected
  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < fee86edf5803f1d1f19e3b4f2dacac241bddfa48affected
  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < 767e8349f7e929b7dd95c08f0b4cb353459b365eaffected
  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < b0a9609283a5c852addb513dafa655c61eebc1efaffected
  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < 161bdc90fce25bd9890adc67fa1c8563a7acbf40affected
  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < 9532ff0d0e90ff78a214299f594ab9bac81defe4affected
  • 104880a6b470958ddc30e139c41aa4f6ed3a5234 to < 2397e9264676be7794f8f7f1e9763d90bd3c7335affected

Linux Linux

Default version status: affected

  • 4.3affected
  • 0 to < 4.3unaffected
  • 5.10.249 to ≤ 5.10.*unaffected
  • 5.15.199 to ≤ 5.15.*unaffected
  • 6.1.162 to ≤ 6.1.*unaffected
  • 6.6.122 to ≤ 6.6.*unaffected
  • 6.12.68 to ≤ 6.12.*unaffected
  • 6.18.8 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References