NetSight
IP …
medium5.5

CVE-2026-23060

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn ass…

Impact

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than the minimum expected length, crypto_authenc_esn_decrypt() can advance past the end of the destination scatterlist and trigger a NULL pointer dereference in scatterwalk_map_and_copy(), leading to a kernel panic (DoS). Add a minimum AAD length check to fail fast on invalid inputs.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.3 before 5.10.249
from 5.11 before 5.15.199
from 5.16 before 6.1.162
from 6.2 before 6.6.122
from 6.7 before 6.12.68
from 6.13 before 6.18.8

Weakness classification

CWE-476

References