In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Cap AEAD AD length to 0x80000000
In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Jun 30, 2026 | Jun 30, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel-livepatch-6.18.33-63.124Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-debuginfoUpgrade kernel6.18-toolsUpgrade kernel6.18-tools-develUpgrade perf6.18Upgrade python3-perf6.18Upgrade kernel6.18-develUpgrade kernel6.18-modules-extraUpgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade perf6.18-debuginfoUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub