Buffer Overflow Vulnerability in Linux Kernel Crypto Driver

CVE-2026-31698

What is CVE-2026-31698?

A buffer overflow vulnerability has been identified in the Linux kernel's crypto driver. This issue arises when a command to retrieve the PDH certificate fails, specifically if the command returns an invalid length. In such scenarios, the system could attempt to write more data than the allocated buffer size, leading to a potential leak of sensitive information to user space. This flaw highlights the need for proper error handling and validation in kernel-level operations to prevent unauthorized data exposure.

References