CVE-2026-31719: crypto: krb5enc - fix async decrypt skipping hash verification

Published May 1, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

crypto: krb5enc - fix async decrypt skipping hash verification

krb5encdispatchdecrypt() sets req->base.complete as the skcipher callback, which is the caller's own completion handler. When the skcipher completes asynchronously, this signals "done" to the caller without executing krb5encdispatchdecrypthash(), completely bypassing the integrity verification (hash check).

Compare with the encrypt path which correctly uses krb5encencryptdone as an intermediate callback to chain into the hash computation on async completion.

Fix by adding krb5encdecryptdone as an intermediate callback that chains into krb5encdispatchdecrypthash() upon async skcipher completion, matching the encrypt path's callback pattern.

Also fix EBUSY/EINPROGRESS handling throughout: remove krb5encrequestcomplete() which incorrectly swallowed EINPROGRESS notifications that must be passed up to callers waiting on backlogged requests, and add missing EBUSY checks in krb5encencryptahashdone for the dispatchencrypt return value.

Unset MAYBACKLOG on the async completion path so the user won't see back-to-back EINPROGRESS notifications.

Affected Software

4 affected components
Linux Linux kernel (krb5enc)
Linux Linux kernel>=6.15<6.18.25
Linux Linux kernel>=6.19<7.0.2
Linux Linux kernel=7.1-rc1

Event History

May 1, 2026
CVE Published
via MITRE·01:56 PM
Data Sourced
via MITRE·01:56 PM
DescriptionSeverity
Data Sourced
via NVD·02:16 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-31719?

CVE-2026-31719 has a high severity rating due to the potential for skipping hash verification in async decrypt operations.

2

How do I fix CVE-2026-31719?

To fix CVE-2026-31719, upgrade to the latest version of the Linux kernel that addresses this vulnerability.

3

What causes CVE-2026-31719?

CVE-2026-31719 is caused by the krb5enc_dispatch_decrypt function erroneously skipping hash verification during asynchronous decryption.

4

Who is affected by CVE-2026-31719?

Users of the Linux kernel utilizing krb5enc functionality are affected by CVE-2026-31719.

5

Is there any workaround for CVE-2026-31719?

There is no known workaround for CVE-2026-31719; the only resolution is to apply the necessary kernel updates.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203