Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-53016

crypto: ccp - copy IV using skcipher ivsize

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < 939061b2d0f7f15114e34b4ce878ef50ff4089c3affected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < 798d409a8949f3f495f238549b86de2886b129bdaffected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < dfb2cf434829819268fe50f41542aad318ad62b2affected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < eecee15e263ccb8cd77170a56ab6c969cb54dd6aaffected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < bb01d8f1f385bc9034ca114d3508c7fdea24fc9aaffected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < df9784bb5b637ac80f4a2768a58ca9a50bef28a9affected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < 227c1e1d9e2aa4cfc65ba446d5690da1f546cda4affected
  • 2b789435d7f36ed918d92db647f3a2f3fec9bb1f to < a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4affected

Linux Linux

Default version status: affected

  • 3.14affected
  • 0 to < 3.14unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References