CVE-2026-53016
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
crypto: ccp - copy IV using skcipher ivsize
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | 939061b2d0f7f15114e34b4ce878ef50ff4089c3 | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | 798d409a8949f3f495f238549b86de2886b129bd | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | dfb2cf434829819268fe50f41542aad318ad62b2 | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | eecee15e263ccb8cd77170a56ab6c969cb54dd6a | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | bb01d8f1f385bc9034ca114d3508c7fdea24fc9a | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | df9784bb5b637ac80f4a2768a58ca9a50bef28a9 | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | 227c1e1d9e2aa4cfc65ba446d5690da1f546cda4 | Unavailable | None listed |
| 2b789435d7f36ed918d92db647f3a2f3fec9bb1f | affected | git | a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.14 | Unavailable | None listed |
| 5.10.258 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.209 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.175 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.141 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.91 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.33 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.0.10 | unaffected | semver | Unavailable | 7.0.* | None listed |
| 7.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |