Page Reassignment Overflow in Linux Kernel's af_alg Functionality

CVE-2026-43078

What is CVE-2026-43078?

A vulnerability exists in the Linux Kernel's af_alg subsystem, where an oversight in the page reassignment logic can lead to a condition that attempts to reassign one more page than necessary. This occurs due to an outdated loop in the af_alg_pull_tsgl function. The vulnerability has been addressed with the addition of necessary checks to prevent this overflow, ensuring that page assignments remain accurate. Furthermore, the comments in the code have been updated to remove references to outdated arguments, enhancing code clarity and maintenance.

References