Integrity Bypass in Linux Kernel Affecting Asynchronous Crypto Operations

CVE-2026-31719

What is CVE-2026-31719?

In the Linux kernel, a vulnerability has been identified in the handling of asynchronous cryptographic operations where the integrity verification of decrypted data was bypassed. Specifically, in the krb5 enc scheme, the function responsible for decrypting data did not execute the necessary hash verification after asynchronous decryption was completed. This flaw could potentially allow attackers to manipulate data without detection. The fix introduces an intermediate callback to ensure that integrity checks are performed consistently, thereby aligning the decryption path with the secure practices of the encryption path. Additionally, improvements were made to error handling to prevent improper notifications during processing.

References