In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - copy IV using skcipher ivsize
AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.
ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV
buffer while RFC3686 skciphers expose an 8-byte IV, so the restore
overruns the provided buffer.
Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.
References
Configurations
Configuration 1 (hide)
|
History
16 Sep 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2026-06-24 17:17
Updated : 2026-09-16 13:18
NVD link : CVE-2026-53016
Mitre link : CVE-2026-53016
CVE.ORG link : CVE-2026-53016
JSON object : View
Products Affected
linux
- linux_kernel
