An issue exists in the `authencesn` component of the crypto subsystem where the `crypto authenc esn create()` function fails to validate the `auth->digestsize` before copying it into `inst->alg.maxauthsize`. This allows the creation of instances with an invalid default `authsize` between 1 and 3 bytes when using an ahash with a corresponding digest size, such as `cbcmac(cipher null)`. Consequently, the `AF ALG` interface can trigger ESN tail handling with an insufficient tag length, leading to an out-of-bounds access.