Vulnerability · Published May 6, 2026 · Assigned by Linux

CVE-2026-43077crypto: algif_aead - Fix minimum RX size check for decryption

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.1%top 98.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the required extra length.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:10kernel-abi-stablelists6.12.0-124.55.1.el10_1ALSA-2026:13566
AlmaLinux:8kernel-abi-stablelists4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-core4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-cross-headers4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-debug4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-debug-core4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-debug-devel4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-debug-modules4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-devel4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:10kernel-doc6.12.0-124.55.1.el10_1ALSA-2026:13566
AlmaLinux:8kernel-doc4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-headers4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-modules4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-modules-extra4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-rt4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-core4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-debug4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-debug-core4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-devel4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-modules4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.123.1.rt7.464.el8_10ALSA-2026:13578
AlmaLinux:8kernel-tools4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-tools-libs4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-zfcpdump4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8perf4.18.0-553.123.1.el8_10ALSA-2026:13577
AlmaLinux:8python3-perf4.18.0-553.123.1.el8_10ALSA-2026:13577
Debian:12linux6.1.170-1DEBIAN-CVE-2026-43077
Debian:13linux6.12.85-1DEBIAN-CVE-2026-43077
Debian:14linux6.19.14-1DEBIAN-CVE-2026-43077
Rocky Linux:8kernel0:4.18.0-553.123.1.el8_10.cloud.0.1RXSA-2026:13577
Rocky Linux:9kernel0:5.14.0-611.54.1.el9_7.cloud.1.0RXSA-2026:13565
Ubuntu:22.04:LTSlinux5.15.0-179.189USN-8279-1
Ubuntu:22.04:LTSlinux5.15.0-179.189UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux6.8.0-117.117UBUNTU-CVE-2026-43077
Ubuntu:25.10linux6.17.0-29.29USN-8277-1
Ubuntu:25.10linux6.17.0-29.29UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-aws5.15.0-1108.115UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-aws5.15.0-1108.115USN-8279-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-aws6.17.0-1015.15USN-8277-1
Ubuntu:25.10linux-aws6.17.0-1015.15UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1017.17~24.04.1UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1017.17~24.04.1USN-8374-1
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1057.60~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure5.15.0-1114.123USN-8426-2
Ubuntu:22.04:LTSlinux-azure5.15.0-1114.123UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure6.8.0-1056.62UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-azure6.17.0-1015.15UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-azure6.17.0-1015.15USN-8310-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1015.15~24.04.1USN-8310-1
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1015.15~24.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1114.123UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-gcp5.15.0-1108.117USN-8279-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1108.117UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gcp6.8.0-1058.61UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-gcp6.17.0-1018.19USN-8374-1
Ubuntu:25.10linux-gcp6.17.0-1018.19UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1018.19~24.04.1UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1018.19~24.04.1USN-8374-1
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-gke5.15.0-1104.110USN-8279-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1104.110UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gke6.8.0-1054.60UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1091.99USN-8279-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1091.99UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1041.44UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-29.29~24.04.1UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-29.29~24.04.1USN-8277-1
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-124.124~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-ibm5.15.0-1102.105UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-ibm5.15.0-1102.105USN-8279-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1055.56UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1055.56~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1103.109USN-8279-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1103.109UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-kvm5.15.0-1100.105UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-kvm5.15.0-1100.105USN-8279-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-179.189UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-179.189USN-8351-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-117.117.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-117.117.1~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1103.104USN-8279-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1103.104UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1054.57UBUNTU-CVE-2026-43077
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1006.6UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1026.26UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1026.26USN-8508-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1054.57.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1060.60USN-8279-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1060.60UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1025.25UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1025.25USN-8350-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1049.49UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1049.49USN-8279-3
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1023.23UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1023.23USN-8277-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-oracle5.15.0-1105.111USN-8279-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1105.111UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oracle6.8.0-1054.55UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-oracle6.17.0-1014.14UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-oracle6.17.0-1014.14USN-8277-1
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1014.14~24.04.1USN-8277-2
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1014.14~24.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1054.55~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-raspi5.15.0-1102.105USN-8279-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1102.105UBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-raspi6.8.0-1056.60UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-raspi6.17.0-1017.17UBUNTU-CVE-2026-43077
Ubuntu:25.10linux-raspi6.17.0-1017.17USN-8277-1
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-43077
Ubuntu:25.10linux-realtime6.17.0-1013.15USN-8277-1
Ubuntu:25.10linux-realtime6.17.0-1013.15UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-43077
Ubuntu:25.10linux-riscv6.17.0-29.29.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-29.29.1~24.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-117.117~22.04.1UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-43077
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-43077
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1074.78UBUNTU-CVE-2026-43077

Affected products (as reported)

VendorProductVersions
Linux Linux d887c52d6ae43aeebd249b5f2f1333e60236aa60 – before 74a66fdb5282d89e348b00c42cfca3a936946d94d887c52d6ae43aeebd249b5f2f1333e60236aa60 – before fd427dd84f224309afbcc2cb67c7bb770a01265cd887c52d6ae43aeebd249b5f2f1333e60236aa60 – before 1c76b5675119f694458293a2a81f40731c69bd32d887c52d6ae43aeebd249b5f2f1333e60236aa60 – before e86ab1e5661386a874fbb8551f0c04b8e9f8ad22d887c52d6ae43aeebd249b5f2f1333e60236aa60 – before af2fa2fbbced26129813274b8b3f7705f280e174d887c52d6ae43aeebd249b5f2f1333e60236aa60 – before 78cea133daf721698876e56135049a96d39d610ad887c52d6ae43aeebd249b5f2f1333e60236aa60 – before 3afdc15d6173614d7d834517d9b65e7aa5a08548d887c52d6ae43aeebd249b5f2f1333e60236aa60 – before 3d14bd48e3a77091cbce637a12c2ae31b4a1687c
Linux Linux 4.14

References