Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43077

crypto: algif_aead - Fix minimum RX size check for decryption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the required extra length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 74a66fdb5282d89e348b00c42cfca3a936946d94affected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < fd427dd84f224309afbcc2cb67c7bb770a01265caffected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 1c76b5675119f694458293a2a81f40731c69bd32affected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < e86ab1e5661386a874fbb8551f0c04b8e9f8ad22affected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < af2fa2fbbced26129813274b8b3f7705f280e174affected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 78cea133daf721698876e56135049a96d39d610aaffected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 3afdc15d6173614d7d834517d9b65e7aa5a08548affected
  • d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 3d14bd48e3a77091cbce637a12c2ae31b4a1687caffected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 5.10.254 to ≤ 5.10.*unaffected
  • 5.15.204 to ≤ 5.15.*unaffected
  • 6.1.170 to ≤ 6.1.*unaffected
  • 6.6.136 to ≤ 6.6.*unaffected
  • 6.12.83 to ≤ 6.12.*unaffected
  • 6.18.24 to ≤ 6.18.*unaffected
  • 6.19.14 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References