REDHAT-BUG-2429583: Medium severity Linux Kernel vulnerability
Published Jan 14, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
crypto: seqiv - Do not use req->iv after cryptoaeadencrypt
As soon as cryptoaeadencrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing req->iv after it returns is invalid.
Instead of checking req->iv against info, create a new variable unalignedinfo and use it for that purpose instead.
Affected Software
1 affected component
Linux Kernel
Event History
Jan 14, 2026
Data Sourced
via Red Hat·04:02 PM
DescriptionSeverityAffected Software