Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel 6.6.157.1-1 can mishandle encrypted data
published 6 months ago
Summary
The Linux kernel version 6.6.157.1-1 has a flaw in its cryptographic code that could cause it to drop or misprocess data when the receive buffer is full. This may lead to failed communications or a temporary loss of service. Updating to the latest kernel release that includes the fix resolves the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
| Azure Linux:3 | – | kernel |
<= 6.6.157.1-1 <= 6.6.152.1-1 |
Original advisory text
CVE-2026-31677 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - limit RX SG extraction by receive buffer budget
Make af_alg_get_rsgl() limit each RX scatterlist extraction to the
remaining receive buffer budget.
af_alg_get_rsgl() currently uses af_alg_readable() only as a gate
before extracting data into the RX scatterlist. Limit each extraction
to the remaining af_alg_rcvbuf(sk) budget so that receive-side
accounting matches the amount of data attached to the request.
If skcipher cannot obtain enough RX space for at least one chunk while
more data remains to be processed, reject the recvmsg call instead of
rounding the request length down to zero.
crypto: af_alg - limit RX SG extraction by receive buffer budget
Make af_alg_get_rsgl() limit each RX scatterlist extraction to the
remaining receive buffer budget.
af_alg_get_rsgl() currently uses af_alg_readable() only as a gate
before extracting data into the RX scatterlist. Limit each extraction
to the remaining af_alg_rcvbuf(sk) budget so that receive-side
accounting matches the amount of data attached to the request.
If skcipher cannot obtain enough RX space for at least one chunk while
more data remains to be processed, reject the recvmsg call instead of
rounding the request length down to zero.
References
Timeline
Published25 Apr 2026
Updated24 Sep 2026
First seen23 Sep 2026
Sources
AZL-84210 · OSV
Track software like this
Free during beta