Vulnerability · Published Feb 4, 2026 · Assigned by Linux

CVE-2026-23060crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 92.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than the minimum expected length, crypto_authenc_esn_decrypt() can advance past the end of the destination scatterlist and trigger a NULL pointer dereference in scatterwalk_map_and_copy(), leading to a kernel panic (DoS). Add a minimum AAD length check to fail fast on invalid inputs.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-abi-stablelists6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-abi-stablelists5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-cross-headers6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-cross-headers5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-doc6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-doc5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-headers6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-headers5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:10kernel-rt6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-tools6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-tools5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-tools-libs6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-tools-libs5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-uki-virt6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-uki-virt5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10libperf6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9libperf5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10perf6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9perf5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10python3-perf6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9python3-perf5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10rtla6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9rtla5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10rv6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9rv5.14.0-687.5.3.el9_8ALSA-2026:19225
Debian:12linux6.1.162-1DEBIAN-CVE-2026-23060
Debian:13linux6.12.69-1DEBIAN-CVE-2026-23060
Debian:14linux6.18.8-1DEBIAN-CVE-2026-23060
Ubuntu:22.04:LTSlinux5.15.0-174.184UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux5.15.0-174.184USN-8159-1
Ubuntu:24.04:LTSlinux6.8.0-107.107UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux6.8.0-107.107USN-8148-1
Ubuntu:25.10linux6.17.0-20.20USN-8149-1
Ubuntu:25.10linux6.17.0-20.20UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-aws5.15.0-1104.111UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-aws5.15.0-1104.111USN-8159-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1051.54UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-aws6.8.0-1051.54USN-8148-1
Ubuntu:25.10linux-aws6.17.0-1010.10UBUNTU-CVE-2026-23060
Ubuntu:25.10linux-aws6.17.0-1010.10USN-8149-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1010.10~24.04.1UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1010.10~24.04.1USN-8149-1
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1051.54~22.04.1USN-8148-5
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1051.54~22.04.1UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure5.15.0-1109.118UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure6.8.0-1052.58USN-8148-6
Ubuntu:24.04:LTSlinux-azure6.8.0-1052.58UBUNTU-CVE-2026-23060
Ubuntu:25.10linux-azure6.17.0-1011.11USN-8149-3
Ubuntu:25.10linux-azure6.17.0-1011.11UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1011.11~24.04.2USN-8149-3
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1011.11~24.04.2UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1052.58~22.04.1UBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1052.58~22.04.1USN-8148-6
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1109.118.1UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2026-23060
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-23060
Ubuntu:22.04:LTSlinux-gcp5.15.0-1104.113USN-8159-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1104.113UBUNTU-CVE-2026-23060
Ubuntu:24.04:LTSlinux-gcp6.8.0-1053.56USN-8148-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1053.56UBUNTU-CVE-2026-23060

Affected products (as reported)

VendorProductVersions
Linux Linux 104880a6b470958ddc30e139c41aa4f6ed3a5234 – before df22c9a65e9a9daa368a72fed596af9d7d5876bb104880a6b470958ddc30e139c41aa4f6ed3a5234 – before fee86edf5803f1d1f19e3b4f2dacac241bddfa48104880a6b470958ddc30e139c41aa4f6ed3a5234 – before 767e8349f7e929b7dd95c08f0b4cb353459b365e104880a6b470958ddc30e139c41aa4f6ed3a5234 – before b0a9609283a5c852addb513dafa655c61eebc1ef104880a6b470958ddc30e139c41aa4f6ed3a5234 – before 161bdc90fce25bd9890adc67fa1c8563a7acbf40104880a6b470958ddc30e139c41aa4f6ed3a5234 – before 9532ff0d0e90ff78a214299f594ab9bac81defe4104880a6b470958ddc30e139c41aa4f6ed3a5234 – before 2397e9264676be7794f8f7f1e9763d90bd3c7335
Linux Linux 4.3

Weakness: CWE-476

References