{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-46028",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-46028",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-05-27T12:56:36.847Z",
    "updatedAt": "2026-06-14T17:49:01.589Z",
    "importedAt": "2026-10-24T01:58:14.884Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "crypto: algif_aead - snapshot IV for async AEAD requests",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - snapshot IV for async AEAD requests\n\nAF_ALG AEAD AIO requests currently use the socket-wide IV buffer during\nrequest processing.  For async requests, later socket activity can\nupdate that shared state before the original request has fully\ncompleted, which can lead to inconsistent IV handling.\n\nSnapshot the IV into per-request storage when preparing the AEAD\nrequest, so in-flight operations no longer depend on mutable socket\nstate.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "08ea39a556ecd39b33c2b4888861001c6706a62e"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a920cabdb0b7cf1f4e11a20524253ae5bd09092b"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "fa0fcec9b49d58e71df7ede91ecd86855f608e85"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "c2138c9bd02af19e0b407376140cd5435b0d81da"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "46fdb39e83227b5d39f7c934a0947ea913f13c18"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ebc235675f24b0e3f8bc92b8419471d42f837d8f"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "3d72f8c6490dc79210b64270740cb2a8619361a4"
            },
            {
              "version": "d887c52d6ae43aeebd249b5f2f1333e60236aa60",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5aa58c3a572b3e3b6c786953339f7978b845cc52"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.14",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.14"
            },
            {
              "version": "5.10.254",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.204",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.170",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.137",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.85",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.27",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.0.4",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.*"
            },
            {
              "version": "7.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}