Description
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
400c40cf78da00c16e561a3a253ca272455c42ef to < f8a5203596797f394ff3f9aa4005597a92249802affected400c40cf78da00c16e561a3a253ca272455c42ef to < a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321daffected400c40cf78da00c16e561a3a253ca272455c42ef to < a4fe4eb580bbc7439f649a496d4cf38415a4021caffected400c40cf78da00c16e561a3a253ca272455c42ef to < e4c4a5074532eaaa14951994a3aad0d479aa7431affected400c40cf78da00c16e561a3a253ca272455c42ef to < 265ac26d1c5e17b34d497cbda1f754a1ec8552bcaffected400c40cf78da00c16e561a3a253ca272455c42ef to < a1c5672faf8e93e38c2deac3979cc767ca5cf918affected400c40cf78da00c16e561a3a253ca272455c42ef to < 97948906dc8e0ea84775e03e35b60a2063c70193affected400c40cf78da00c16e561a3a253ca272455c42ef to < 0b3a57d218618cb1cc78ddc9ba02c07de84b46f4affected400c40cf78da00c16e561a3a253ca272455c42ef to < e4c06479d7059888adf2f22bc1ebcf053bf691a2affected
Linux Linux
Default version status: affected
4.1affected0 to < 4.1unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.141 to ≤ 6.6.*unaffected6.12.91 to ≤ 6.12.*unaffected6.18.33 to ≤ 6.18.*unaffected7.0.10 to ≤ 7.0.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f8a5203596797f394ff3f9aa4005597a92249802 ↗
- https://git.kernel.org/stable/c/a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321d ↗
- https://git.kernel.org/stable/c/a4fe4eb580bbc7439f649a496d4cf38415a4021c ↗
- https://git.kernel.org/stable/c/e4c4a5074532eaaa14951994a3aad0d479aa7431 ↗
- https://git.kernel.org/stable/c/265ac26d1c5e17b34d497cbda1f754a1ec8552bc ↗
- https://git.kernel.org/stable/c/a1c5672faf8e93e38c2deac3979cc767ca5cf918 ↗
- https://git.kernel.org/stable/c/97948906dc8e0ea84775e03e35b60a2063c70193 ↗
- https://git.kernel.org/stable/c/0b3a57d218618cb1cc78ddc9ba02c07de84b46f4 ↗
- https://git.kernel.org/stable/c/e4c06479d7059888adf2f22bc1ebcf053bf691a2 ↗
- https://access.redhat.com/security/cve/CVE-2026-52972 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2492364 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52972.json ↗