Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 893d22e0135fa394db81df88697fba6032747667; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 19d43105a97be0810edbda875f2cd03f30dc130c; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 961cfa271a918ad4ae452420e7c303149002875b; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 3115af9644c342b356f3f07a4dd1c8905cd9a6fc; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 8b88d99341f139e23bdeb1027a2a3ae10d341d82; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < ce42ee423e58dffa5ec03524054c9d8bfd4f6237; >= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 |
| Linux | Linux | 4.14 |
| Red Hat | NVIDIA for RHEL 10 | — |
| Red Hat | Red Hat Enterprise Linux 10 | — |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — |
| Red Hat | Red Hat Enterprise Linux 6 | — |
| Red Hat | Red Hat Enterprise Linux 7 | — |
| Red Hat | Red Hat Enterprise Linux 7 | — |
| Siemens | SIMATIC AX Runtime Core Linux Common Debian | < * |
| Siemens | SIMATIC AX Runtime Core Linux Common Debian arm64 | < * |
| Siemens | SIMATIC AX Runtime Core Linux Platform Container Common Debian Development | < * |
| Siemens | SIMATIC AX Runtime Core Linux VMWare Development | < * |
| Siemens | SIMATIC CN 4100 | < V6.0 |
| Siemens | SIMATIC HMI MTP1000 Unified Basic | < V21 Update 2 SR1 |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel | < V21 Update 2 SR1 |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic | < V21 Update 2 SR1 |
References
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130cPatch
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fcPatch
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667Patch
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82Patch
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875bPatch
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5Patch
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237Patch
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8Patch
- http://www.openwall.com/lists/oss-security/2026/04/29/23Exploit, Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/29/25Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/29/26Exploit, Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/10Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/11Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/12Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/14Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/15Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/16Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/17Mailing List
- http://www.openwall.com/lists/oss-security/2026/04/30/18Exploit, Mailing List
- http://www.openwall.com/lists/oss-security/2026/04/30/2Mailing List
- http://www.openwall.com/lists/oss-security/2026/04/30/20Mailing List
- http://www.openwall.com/lists/oss-security/2026/04/30/5Exploit, Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2026/04/30/6Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/10Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/12Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/15Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/16Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/17Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/18Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/2Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/22Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/23Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/24Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/01/3Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/14Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/15Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/16Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/17Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/18Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/19Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/20Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/21Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/23Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/24Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/25Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/4Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/5Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/6Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/7Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/02/8Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/10Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/12Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/13Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/3Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/4Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/5Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/03/6Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/04/1Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/04/10Mailing List
- http://www.openwall.com/lists/oss-security/2026/05/04/11Mailing List
Timeline
- Published
- Apr 22, 2026
- Last modified
- Nov 11, 2026
- Added to CISA KEV
- May 1, 2026
- NVD status
- Analyzed