← All advisories

Medium severity5.5NVD Advisory· Published Jun 24, 2026· Updated Jul 24, 2026

CVE-2026-52972

CVE-2026-52972

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: af_alg - Cap AEAD AD length to 0x80000000

In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.1,<5.10.258
- (no CPE)
osv-coords
pkg:linux/kernel
Range: >= 4.1.0, < 5.10.258

Patches

Vulnerability mechanics

References

12

git.kernel.org/stable/c/265ac26d1c5e17b34d497cbda1f754a1ec8552bcnvdPatch
git.kernel.org/stable/c/97948906dc8e0ea84775e03e35b60a2063c70193nvdPatch
git.kernel.org/stable/c/a1c5672faf8e93e38c2deac3979cc767ca5cf918nvdPatch
git.kernel.org/stable/c/a4fe4eb580bbc7439f649a496d4cf38415a4021cnvdPatch
git.kernel.org/stable/c/a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321dnvdPatch
git.kernel.org/stable/c/e4c06479d7059888adf2f22bc1ebcf053bf691a2nvdPatch
git.kernel.org/stable/c/e4c4a5074532eaaa14951994a3aad0d479aa7431nvdPatch
git.kernel.org/stable/c/f8a5203596797f394ff3f9aa4005597a92249802nvdPatch
access.redhat.com/security/cve/CVE-2026-52972nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52972.jsonnvdThird Party Advisory
git.kernel.org/stable/c/0b3a57d218618cb1cc78ddc9ba02c07de84b46f4nvd

News mentions

0

No linked articles in our index yet.