CVE-2026-23060

EUVD-2026-5484

04.02.2026, 17:16

In the Linux kernel, the following vulnerability has been resolved:

crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than
the minimum expected length, crypto_authenc_esn_decrypt() can advance past
the end of the destination scatterlist and trigger a NULL pointer dereference
in scatterwalk_map_and_copy(), leading to a kernel panic (DoS).

Add a minimum AAD length check to fail fast on invalid inputs.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 4%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	4.3 ≤ 𝑥 < 5.10.249
linux	linux_kernel	5.11 ≤ 𝑥 < 5.15.199
linux	linux_kernel	5.16 ≤ 𝑥 < 6.1.162
linux	linux_kernel	6.2 ≤ 𝑥 < 6.6.122
linux	linux_kernel	6.7 ≤ 𝑥 < 6.12.68
linux	linux_kernel	6.13 ≤ 𝑥 < 6.18.8
linux	linux_kernel	6.19:rc1
linux	linux_kernel	6.19:rc2
linux	linux_kernel	6.19:rc3
linux	linux_kernel	6.19:rc4
linux	linux_kernel	6.19:rc5
linux	linux_kernel	6.19:rc6

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.170-3 fixed
bookworm (security)	6.1.172-1 fixed
bullseye	vulnerable
bullseye (security)	5.10.251-5 fixed
forky	7.0.7-1 fixed
sid	7.0.7-1 fixed
trixie	6.12.86-1 fixed
trixie (security)	6.12.88-1 fixed

linux-6.1

bullseye (security)

6.1.172-1~deb11u1

fixed

openSUSE / SLES Releases

openSUSE Product

Release

cluster-md-kmp-default

suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed

dlm-kmp-default

suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed

gfs2-kmp-default

suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed

kernel-64kb

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-azure

suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-default

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-default-base

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1.150700.17.23.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1.150700.17.23.1 fixed
suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1.150400.24.100.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1.150500.6.69.2 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1.150600.12.42.2 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1.150700.17.23.1 fixed

kernel-default-man

suse enterprise server 12 SP5

4.12.14-122.296.1

fixed

kernel-docs

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-macros

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-obs-build

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-source

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-syms

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

kernel-zfcpdump

suse enterprise desktop 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.34.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.34.1 fixed

ocfs2-kmp-default

suse enterprise server 12 SP5	4.12.14-122.296.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed

reiserfs-kmp-default

suse enterprise server 15 SP4	5.14.21-150400.24.197.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.141.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.92.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

kernel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug-devel-matched

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-debug-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-devel-matched

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-64k-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-abi-stablelists

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-devel-matched

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-debug-uki-virt

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-devel-matched

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-doc

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-debug

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-debug-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-debug-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-debug-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-debug-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-debug-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-64k-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-debug

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-debug-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-debug-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-debug-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-debug-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-debug-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-rt-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-tools

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-tools-libs

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-tools-libs-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-uki-virt

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-uki-virt-addons

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump-devel

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump-devel-matched

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump-modules

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump-modules-core

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

kernel-zfcpdump-modules-extra

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

libperf

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

perf

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

python3-perf

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

rtla

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

RHEL 9

0:5.14.0-687.5.3.el9_8

fixed

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://git.kernel.org/stable/c/161bdc90fce25bd9890adc67fa1c8563a7acbf40

https://git.kernel.org/stable/c/2397e9264676be7794f8f7f1e9763d90bd3c7335

https://git.kernel.org/stable/c/767e8349f7e929b7dd95c08f0b4cb353459b365e

https://git.kernel.org/stable/c/9532ff0d0e90ff78a214299f594ab9bac81defe4

https://git.kernel.org/stable/c/b0a9609283a5c852addb513dafa655c61eebc1ef

https://git.kernel.org/stable/c/df22c9a65e9a9daa368a72fed596af9d7d5876bb

https://git.kernel.org/stable/c/fee86edf5803f1d1f19e3b4f2dacac241bddfa48