QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-46028

Back to search

CVE-2026-46028

Published: May 27, 2026

Modified: May 27, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests AF_ALG AEAD AIO requests currently use the socket-wide IV buffer during request processing. For async requests, later socket activity can update that shared state before the original request has fully completed, which can lead to inconsistent IV handling. Snapshot the IV into per-request storage when preparing the AEAD request, so in-flight operations no longer depend on mutable socket state.

VendorProductVersions

Linux

Linux

affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 - < 08ea39a556ecd39b33c2b4888861001c6706a62e
affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 - < a920cabdb0b7cf1f4e11a20524253ae5bd09092b
affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 - < fa0fcec9b49d58e71df7ede91ecd86855f608e85
affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 - < c2138c9bd02af19e0b407376140cd5435b0d81da
affected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 - < 46fdb39e83227b5d39f7c934a0947ea913f13c18

+3 more versions

Linux

Linux

affected
4.14
unaffected
0 - < 4.14
unaffected
5.10.254 - <= 5.10.*
unaffected
5.15.204 - <= 5.15.*
unaffected
6.1.170 - <= 6.1.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now