CVE-2026-52972

crypto: af_alg - Cap AEAD AD length to 0x80000000

State: Published
Severity: 7.0 High
Published: Jun 24, 2026
Updated: Aug 17, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: af_alg - Cap AEAD AD length to 0x80000000

In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	redhat-SADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	400c40cf78da00c16e561a3a253ca272455c42ef to before f8a5203596797f394ff3f9aa4005597a92249802Affected 400c40cf78da00c16e561a3a253ca272455c42ef to before a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321dAffected 400c40cf78da00c16e561a3a253ca272455c42ef to before a4fe4eb580bbc7439f649a496d4cf38415a4021cAffected 400c40cf78da00c16e561a3a253ca272455c42ef to before e4c4a5074532eaaa14951994a3aad0d479aa7431Affected 400c40cf78da00c16e561a3a253ca272455c42ef to before 265ac26d1c5e17b34d497cbda1f754a1ec8552bcAffected 400c40cf78da00c16e561a3a253ca272455c42ef to before a1c5672faf8e93e38c2deac3979cc767ca5cf918Affected 400c40cf78da00c16e561a3a253ca272455c42ef to before 97948906dc8e0ea84775e03e35b60a2063c70193Affected 400c40cf78da00c16e561a3a253ca272455c42ef to before 0b3a57d218618cb1cc78ddc9ba02c07de84b46f4Affected 400c40cf78da00c16e561a3a253ca272455c42ef to before e4c06479d7059888adf2f22bc1ebcf053bf691a2Affected
LinuxLinux	4.1Affected before 4.1Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

400c40cf78da00c16e561a3a253ca272455c42ef to before f8a5203596797f394ff3f9aa4005597a92249802Affected
400c40cf78da00c16e561a3a253ca272455c42ef to before a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321dAffected
400c40cf78da00c16e561a3a253ca272455c42ef to before a4fe4eb580bbc7439f649a496d4cf38415a4021cAffected
400c40cf78da00c16e561a3a253ca272455c42ef to before e4c4a5074532eaaa14951994a3aad0d479aa7431Affected
400c40cf78da00c16e561a3a253ca272455c42ef to before 265ac26d1c5e17b34d497cbda1f754a1ec8552bcAffected
400c40cf78da00c16e561a3a253ca272455c42ef to before a1c5672faf8e93e38c2deac3979cc767ca5cf918Affected
400c40cf78da00c16e561a3a253ca272455c42ef to before 97948906dc8e0ea84775e03e35b60a2063c70193Affected
400c40cf78da00c16e561a3a253ca272455c42ef to before 0b3a57d218618cb1cc78ddc9ba02c07de84b46f4Affected
400c40cf78da00c16e561a3a253ca272455c42ef to before e4c06479d7059888adf2f22bc1ebcf053bf691a2Affected

LinuxLinux

4.1Affected
before 4.1Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.