Buffer Size Check Flaw in Linux Kernel's Crypto Algorithm Handling

CVE-2026-43077

What is CVE-2026-43077?

A vulnerability in the Linux kernel's crypto subsystem was identified, which involves a flaw in the minimum receive buffer size check during the decryption process. The issue arises due to failure in considering the tag size, potentially leading to improper decryption and related security risks. The resolution includes enhancements to ensure that the minimum receive buffer size accounts for additional necessary lengths, thereby improving the overall security posture of the kernel's cryptography functionalities.

References