In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests AF_ALG AEAD AIO requests currently use the socket-wide IV buffer during request processing. For async requests, later socket activity can update that shared state before the original request has fully completed, which can lead to inconsistent IV handling. Snapshot the IV into per-request storage when preparing the AEAD request, so in-flight operations no longer depend on mutable socket state.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.14, < 5.10.254CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, < 5.15.204CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 6.1.170CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2, < 6.6.137CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.12.85CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Azure) vulnerabilities
Jul 24, 2026Linux kernel (HWE) vulnerabilities
Jul 20, 2026Linux kernel (Xilinx ZynqMP) vulnerabilities
Jul 10, 2026Linux kernel (Xilinx) vulnerabilities
Jul 2, 2026Linux kernel (Raspberry Pi) vulnerabilities
Jul 2, 2026Linux kernel vulnerabilities
Jul 1, 2026Linux kernel (OEM) vulnerabilities
Jul 1, 2026Linux kernel vulnerabilities
Jun 17, 2026Linux kernel (Azure) vulnerabilities
Jun 11, 2026Linux kernel vulnerabilities
Jun 2, 2026Linux kernel (Low Latency) vulnerabilities
Jun 1, 2026Linux kernel (NVIDIA Tegra) vulnerabilities
Jun 1, 2026