{"id":"CVE-2026-43033","state":"PUBLISHED","title":"crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\n\nWhen decrypting data that is not in-place (src != dst), there is\nno need to save the high-order sequence bits in dst as it could\nsimply be re-copied from the source.\n\nHowever, the data to be hashed need to be rearranged accordingly.\n\n\nThanks,","publishedAt":"2026-05-01T14:15:32.583Z","updatedAt":"2026-10-19T19:06:10.536Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"Linux"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"8c62f618576519dbed6816fafc623ce592953025","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"d589abd8b019b07075fda255ceab8c8e950cdb3f","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"d0c4ff6812386880f30bc64c2921299cc4d7b47f","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"89fe118b6470119b20c04afc36e45b81a69ea11f","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"153d5520c3f9fd62e71c7e7f9e34b59cf411e555","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"cded4002d22177e8deaca1f257ecd932c9582b6b","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"e02494114ebf7c8b42777c6cd6982f113bfdbec7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["crypto/authencesn.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.3","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.3","versionType":"semver"},{"version":"5.10.254","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.204","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.170","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.137","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.85","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.22","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.12","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["crypto/authencesn.c"]}],"references":["https://git.kernel.org/stable/c/8c62f618576519dbed6816fafc623ce592953025","https://git.kernel.org/stable/c/d589abd8b019b07075fda255ceab8c8e950cdb3f","https://git.kernel.org/stable/c/5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5","https://git.kernel.org/stable/c/d0c4ff6812386880f30bc64c2921299cc4d7b47f","https://git.kernel.org/stable/c/89fe118b6470119b20c04afc36e45b81a69ea11f","https://git.kernel.org/stable/c/153d5520c3f9fd62e71c7e7f9e34b59cf411e555","https://git.kernel.org/stable/c/cded4002d22177e8deaca1f257ecd932c9582b6b","https://git.kernel.org/stable/c/e02494114ebf7c8b42777c6cd6982f113bfdbec7","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"weaknesses":["CWE-682"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/43xxx/CVE-2026-43033.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-43033","state":"PUBLISHED","datePublished":"2026-05-01T14:15:32.583Z","dateUpdated":"2026-10-19T19:06:10.536Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-05-01T14:12:55.977Z"},"containers":{"cna":{"title":"crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\n\nWhen decrypting data that is not in-place (src != dst), there is\nno need to save the high-order sequence bits in dst as it could\nsimply be re-copied from the source.\n\nHowever, the data to be hashed need to be rearranged accordingly.\n\n\nThanks,"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"8c62f618576519dbed6816fafc623ce592953025","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"d589abd8b019b07075fda255ceab8c8e950cdb3f","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"d0c4ff6812386880f30bc64c2921299cc4d7b47f","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"89fe118b6470119b20c04afc36e45b81a69ea11f","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"153d5520c3f9fd62e71c7e7f9e34b59cf411e555","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"cded4002d22177e8deaca1f257ecd932c9582b6b","versionType":"git"},{"version":"104880a6b470958ddc30e139c41aa4f6ed3a5234","status":"affected","lessThan":"e02494114ebf7c8b42777c6cd6982f113bfdbec7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["crypto/authencesn.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.3","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.3","versionType":"semver"},{"version":"5.10.254","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.204","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.170","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.137","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.85","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.22","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.12","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["crypto/authencesn.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/8c62f618576519dbed6816fafc623ce592953025"},{"url":"https://git.kernel.org/stable/c/d589abd8b019b07075fda255ceab8c8e950cdb3f"},{"url":"https://git.kernel.org/stable/c/5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5"},{"url":"https://git.kernel.org/stable/c/d0c4ff6812386880f30bc64c2921299cc4d7b47f"},{"url":"https://git.kernel.org/stable/c/89fe118b6470119b20c04afc36e45b81a69ea11f"},{"url":"https://git.kernel.org/stable/c/153d5520c3f9fd62e71c7e7f9e34b59cf411e555"},{"url":"https://git.kernel.org/stable/c/cded4002d22177e8deaca1f257ecd932c9582b6b"},{"url":"https://git.kernel.org/stable/c/e02494114ebf7c8b42777c6cd6982f113bfdbec7"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"},"scenarios":[{"lang":"en","value":"AV:L - The vulnerable out-of-place AEAD decrypt path is reachable by a local process through AF_ALG sockets using authencesn, while normal inbound ESP uses in-place src==dst. This requires local syscall access rather than remote packets directly reaching the bad branch.\nAC:L - The attacker controls the AF_ALG request buffers, associated-data length, operation type, key, and authsize, and no race or hard-to-influence state is required. The fault occurs before ICV verification, so a valid packet/tag is not needed.\nPR:L - AF_ALG socket creation, bind, key setup, and AEAD decrypt do not require CAP_NET_ADMIN or CAP_SYS_ADMIN, but the attacker needs local unprivileged code execution. XFRM state management is privileged, but the lower-privilege AF_ALG path reaches the bug.\nUI:N - No victim action is required once the local attacker runs the AF_ALG syscall sequence. The attacker supplies both input and output buffers directly.\nS:U - The vulnerability is in kernel crypto processing and impacts the same kernel security authority. It does not cross a VM, IOMMU, or other separate security boundary.\nC:H - The bug is a kernel memory-corruption condition from writing ESN high sequence bytes past the intended out-of-place destination; successful exploitation of such corruption could expose arbitrary kernel memory. Under the required uncertainty rule, this is scored as high confidentiality impact.\nI:H - The vulnerable code performs an attacker-influenced out-of-bounds write of four bytes before authentication succeeds. Kernel out-of-bounds writes are scored as high integrity impact because they can plausibly be shaped into control-flow or data corruption.\nA:H - At minimum, the AF_ALG path can drive scatterwalk past the end of the destination scatterlist and crash the kernel. A local attacker can repeat the trigger without authentication, causing high availability impact."}]}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-05T12:25:26.050Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"5.10.254"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"5.15.204"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"6.1.170"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"6.6.137"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"6.12.85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"6.18.22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"6.19.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"7.0"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.6","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.6","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.6","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.6","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.6","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"}],"providerMetadata":{"shortName":"siemens-SADP","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","dateUpdated":"2026-10-15T01:18:46.503Z"},"x_adpType":"supplier"},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-43033","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-16T15:13:46.097130Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-682","lang":"en","type":"CWE","description":"CWE-682 Incorrect Calculation"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-19T19:06:10.536Z"}}]}}}