CVE-2026-46028

crypto: algif_aead - snapshot IV for async AEAD requests

State: Published
Severity: Not scored
Published: May 27, 2026
Updated: Jun 14, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - snapshot IV for async AEAD requests

AF_ALG AEAD AIO requests currently use the socket-wide IV buffer during request processing. For async requests, later socket activity can update that shared state before the original request has fully completed, which can lead to inconsistent IV handling.

Snapshot the IV into per-request storage when preparing the AEAD request, so in-flight operations no longer depend on mutable socket state.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 08ea39a556ecd39b33c2b4888861001c6706a62eAffected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before a920cabdb0b7cf1f4e11a20524253ae5bd09092bAffected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before fa0fcec9b49d58e71df7ede91ecd86855f608e85Affected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before c2138c9bd02af19e0b407376140cd5435b0d81daAffected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 46fdb39e83227b5d39f7c934a0947ea913f13c18Affected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before ebc235675f24b0e3f8bc92b8419471d42f837d8fAffected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 3d72f8c6490dc79210b64270740cb2a8619361a4Affected d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 5aa58c3a572b3e3b6c786953339f7978b845cc52Affected
LinuxLinux	4.14Affected before 4.14Not affected 5.10.254 through 5.10.Not affected 5.15.204 through 5.15.Not affected 6.1.170 through 6.1.Not affected 6.6.137 through 6.6.Not affected 6.12.85 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 08ea39a556ecd39b33c2b4888861001c6706a62eAffected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before a920cabdb0b7cf1f4e11a20524253ae5bd09092bAffected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before fa0fcec9b49d58e71df7ede91ecd86855f608e85Affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before c2138c9bd02af19e0b407376140cd5435b0d81daAffected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 46fdb39e83227b5d39f7c934a0947ea913f13c18Affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before ebc235675f24b0e3f8bc92b8419471d42f837d8fAffected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 3d72f8c6490dc79210b64270740cb2a8619361a4Affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to before 5aa58c3a572b3e3b6c786953339f7978b845cc52Affected

LinuxLinux

4.14Affected
before 4.14Not affected
5.10.254 through 5.10.*Not affected
5.15.204 through 5.15.*Not affected
6.1.170 through 6.1.*Not affected
6.6.137 through 6.6.*Not affected
6.12.85 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.