CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.257-1Fixed in 6.1.170-3Fixed in 6.1.174-1Fixed in 6.12.86-1Fixed in 6.12.94-1Fixed in 7.0.12-2Fixed in 7.0.13-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.10.254 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.15.204 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.170 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.137 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.85 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.27 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.0.4
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46028?
The severity of CVE-2026-46028 is assessed as medium with a CVSS score of 5.5.
How do I fix CVE-2026-46028?
To fix CVE-2026-46028, update the Linux kernel to a version that includes the security patch addressing this vulnerability.
What systems are affected by CVE-2026-46028?
CVE-2026-46028 affects systems running specific versions of the Linux kernel and Debian Linux.
What is the risk associated with CVE-2026-46028?
The risk associated with CVE-2026-46028 includes a potential denial of service due to improper handling of async AEAD requests.
When was CVE-2026-46028 published?
CVE-2026-46028 was published on May 27, 2026.