Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-43033

33
FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When decrypting data that is not in-place (src != dst), there is no need to save the high-order sequence bits in dst as it could simply be re-copied from the source. However, the data to be hashed need to be rearranged accordingly. Thanks,

First published: May 1, 2026Last modified: May 11, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 4.3, < 5.10.254CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.204CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.170CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.137CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.85CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.14%
Probability of exploitation in next 30 days
EPSS Percentile
3.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0014 is in the 16th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (92)

microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.134.1-2 on Azure Linux 3.0Fixed in: 6.6.137.1-2
microsoftpatch availablevia msrc
Product: 21248-17084Fixed in: 6.6.137.1-2
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (bionic)Fixed in: 4.15.0-2130.136
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (bionic)Fixed in: 4.15.0-1147.159
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-4.15 (bionic)Fixed in: 4.15.0-1185.202
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (bionic)Fixed in: 4.15.0-2093.99
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (bionic)Fixed in: 4.15.0-1174.179
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (bionic)Fixed in: 4.15.0-1154.165
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-5.4 (bionic)Fixed in: 5.4.0-1162.171~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-5.4 (bionic)Fixed in: 5.4.0-1105.110~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-5.4 (bionic)Fixed in: 5.4.0-1157.167~18.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (focal)Fixed in: 5.4.0-230.250
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (focal)Fixed in: 5.4.0-1159.169
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (focal)Fixed in: 5.4.0-1159.169+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-bluefield (focal)Fixed in: 5.4.0-1118.125
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (focal)Fixed in: 5.4.0-1133.143
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (focal)Fixed in: 5.4.0-1162.171
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (focal)Fixed in: 5.4.0-1162.171+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (focal)Fixed in: 5.4.0-1105.110
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (focal)Fixed in: 5.4.0-1146.155
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (focal)Fixed in: 5.4.0-1157.167
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (focal)Fixed in: 5.4.0-1077.81
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-5.15 (focal)Fixed in: 5.15.0-1108.115~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-179.189~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-5.15 (focal)Fixed in: 5.15.0-1102.105~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg-5.15 (focal)Fixed in: 5.15.0-1103.109~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1060.60~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (jammy)Fixed in: 5.15.0-179.189
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (jammy)Fixed in: 5.15.0-1108.115
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (jammy)Fixed in: 5.15.0-1108.115+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (jammy)Fixed in: 5.15.0-179.189+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (jammy)Fixed in: 5.15.0-1108.117
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1108.117+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (jammy)Fixed in: 5.15.0-1104.110
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (jammy)Fixed in: 5.15.0-1091.99
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (jammy)Fixed in: 5.15.0-1102.105
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg (jammy)Fixed in: 5.15.0-1103.109
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (jammy)Fixed in: 5.15.0-1100.105
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (jammy)Fixed in: 5.15.0-1103.104
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (jammy)Fixed in: 5.15.0-1060.60
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (jammy)Fixed in: 5.15.0-1105.111
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (jammy)Fixed in: 5.15.0-1102.105
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (jammy)Fixed in: 5.15.0-1107.116
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1055.56~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-117.117.1~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1051.52~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-117.117
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1055.58
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (noble)Fixed in: 6.8.0-1055.58+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1058.61+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1054.60
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1041.44
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (noble)Fixed in: 6.8.0-1055.56
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-117.117.1
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (noble)Fixed in: 6.8.0-1056.60
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2045.46
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1051.52
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-6.17 (noble)Fixed in: 6.17.0-29.29~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-6.17 (noble)Fixed in: 6.17.0-1023.23
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.17 (noble)Fixed in: 6.17.0-1013.15~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (questing)Fixed in: 6.17.0-29.29
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (questing)Fixed in: 6.17.0-1015.15
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (questing)Fixed in: 6.17.0-1014.14
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (questing)Fixed in: 6.17.0-1017.17
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (questing)Fixed in: 6.17.0-1013.15
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1054.57
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1054.57.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-5.15 (focal)Fixed in: 5.15.0-1114.123~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (jammy)Fixed in: 5.15.0-1114.123+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iot-realtime (jammy)Fixed in: 5.15.0-1100.102
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-igx (jammy)Fixed in: 5.15.0-1049.49
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1054.57~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-iot (focal)Fixed in: 5.4.0-1063.66
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-179.189~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1056.62
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.17 (noble)Fixed in: 6.17.0-1015.15~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (questing)Fixed in: 6.17.0-1015.15
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-hwe (xenial)Fixed in: 4.15.0-1192.205~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (xenial)Fixed in: 4.15.0-1201.216~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (xenial)Fixed in: 4.15.0-1185.202~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe (xenial)Fixed in: 4.15.0-250.262~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (xenial)Fixed in: 4.15.0-1154.165~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (jammy)Fixed in: 5.15.0-179.189
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (noble)Fixed in: 6.8.0-1025.25
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.17 (noble)Fixed in: 6.17.0-1017.17~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.17 (noble)Fixed in: 6.17.0-1018.19~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (questing)Fixed in: 6.17.0-1018.19
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1032.33
ubuntupatch availablevia ubuntu_usn
Product: linux (bionic)Fixed in: 4.15.0-250.262
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1074.78
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (bionic)Fixed in: 4.15.0-1192.205

Vendor Advisories (21)

ubuntuUSN-8528-1

Linux kernel (Xilinx ZynqMP) vulnerabilities

Jul 10, 2026
ubuntuUSN-8499-1

Linux kernel (Xilinx) vulnerabilities

Jul 2, 2026
ubuntuUSN-8441-1

Linux kernel vulnerabilities

Jun 17, 2026
ubuntuUSN-8426-1

Linux kernel (Azure) vulnerabilities

Jun 11, 2026
ubuntuUSN-8374-1

Linux kernel vulnerabilities

Jun 2, 2026
ubuntuUSN-8351-1

Linux kernel (Low Latency) vulnerabilities

Jun 1, 2026
ubuntuUSN-8350-1

Linux kernel (NVIDIA Tegra) vulnerabilities

Jun 1, 2026
ubuntuUSN-8280-3

Linux kernel (IoT) vulnerabilities

May 26, 2026
ubuntuUSN-8305-2

Linux kernel (Low Latency) vulnerabilities

May 26, 2026
ubuntuUSN-8278-2

Linux kernel (Azure) vulnerabilities

May 26, 2026
ubuntuUSN-8310-1

Linux kernel (Azure) vulnerabilities

May 26, 2026
ubuntuUSN-8305-1

Linux kernel (Intel IoTG Real-time) vulnerabilities

May 25, 2026
ubuntuUSN-8279-3

Linux kernel (NVIDIA Tegra IGX) vulnerabilities

May 25, 2026
ubuntuUSN-8289-2

Linux kernel (NVIDIA) vulnerabilities

May 25, 2026
ubuntuUSN-8289-1

Linux kernel (NVIDIA) vulnerabilities

May 20, 2026
ubuntuUSN-8281-1

Linux kernel vulnerabilities

May 19, 2026
ubuntuUSN-8280-1

Linux kernel vulnerabilities

May 19, 2026
ubuntuUSN-8279-1

Linux kernel vulnerabilities

May 19, 2026
ubuntuUSN-8278-1

Linux kernel vulnerabilities

May 19, 2026
ubuntuUSN-8277-1

Linux kernel vulnerabilities

May 19, 2026
microsoft2026-May/CVE-2026-43033Important

crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

May 2, 2026

References

cert-portal.siemens.com / productcert/html/ssa-019113.html
cert-portal.siemens.com / productcert/html/ssa-082556.html
git.kernel.org / stable/c/153d5520c3f9fd62e71c7e7f9e34b59cf411e555
Patch
git.kernel.org / stable/c/5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5
Patch
git.kernel.org / stable/c/89fe118b6470119b20c04afc36e45b81a69ea11f
Patch
git.kernel.org / stable/c/8c62f618576519dbed6816fafc623ce592953025
Patch
git.kernel.org / stable/c/cded4002d22177e8deaca1f257ecd932c9582b6b
Patch
git.kernel.org / stable/c/d0c4ff6812386880f30bc64c2921299cc4d7b47f
Patch
git.kernel.org / stable/c/d589abd8b019b07075fda255ceab8c8e950cdb3f
Patch
git.kernel.org / stable/c/e02494114ebf7c8b42777c6cd6982f113bfdbec7
Patch