Vulnerability · Published Apr 25, 2026 · Assigned by Linux

CVE-2026-31677crypto: af_alg - limit RX SG extraction by receive buffer budget

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 95.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatterlist extraction to the remaining receive buffer budget. af_alg_get_rsgl() currently uses af_alg_readable() only as a gate before extracting data into the RX scatterlist. Limit each extraction to the remaining af_alg_rcvbuf(sk) budget so that receive-side accounting matches the amount of data attached to the request. If skcipher cannot obtain enough RX space for at least one chunk while more data remains to be processed, reject the recvmsg call instead of rounding the request length down to zero.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-abi-stablelists6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-abi-stablelists5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-cross-headers6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-cross-headers5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-doc6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-doc5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-headers6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-headers5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:10kernel-rt6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-tools6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-tools5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-tools-libs6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-tools-libs5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-uki-virt6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-uki-virt5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10libperf6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9libperf5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10perf6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9perf5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10python3-perf6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9python3-perf5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10rtla6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9rtla5.14.0-687.5.3.el9_8ALSA-2026:19225
AlmaLinux:10rv6.12.0-211.7.3.el10_2ALSA-2026:19074
AlmaLinux:9rv5.14.0-687.5.3.el9_8ALSA-2026:19225
Debian:12linuxno fix listedDEBIAN-CVE-2026-31677
Debian:13linux6.12.85-1DEBIAN-CVE-2026-31677
Debian:14linux6.19.14-1DEBIAN-CVE-2026-31677
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux6.8.0-136.136UBUNTU-CVE-2026-31677
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-aws6.8.0-1061.64UBUNTU-CVE-2026-31677
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1061.64~22.04.1UBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2026-31677
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2026-31677
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-gcp6.8.0-1064.72UBUNTU-CVE-2026-31677
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1064.72~22.04.1UBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-gke6.8.0-1059.67UBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1046.50UBUNTU-CVE-2026-31677
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-31677
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-31677

Affected products (as reported)

VendorProductVersions
Linux Linux e870456d8e7c8d57c059ea479b5aadbb55ff4c3a – before 960c56743988d8ce9ff9b5d770dbeb5f64823a23e870456d8e7c8d57c059ea479b5aadbb55ff4c3a – before 7e345de2e69475430af85e09210795d8eb8e719ce870456d8e7c8d57c059ea479b5aadbb55ff4c3a – before 9bf3e6ccfdcfe56ae3190d1ae987dacf1cfef4f9e870456d8e7c8d57c059ea479b5aadbb55ff4c3a – before 07c6f6ffe29009426f0bd4d3cfbb6308b8ea8453e870456d8e7c8d57c059ea479b5aadbb55ff4c3a – before 4a264b2614c73c96666e196bbabe0cead52bdba7e870456d8e7c8d57c059ea479b5aadbb55ff4c3a – before 8eceab19eba9dcbfd2a0daec72e1bf48aa100170
Linux Linux 4.14

References