CVE-2026-53016

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the cryptographic coprocessor (CCP) driver. When processing AF ALG rfc3686-ctr-aes-ccp requests, the ccp aes complete() function restores more data than the allocated buffer for the Initialization Vector (IV) can hold. Because RFC3686 skciphers expose an 8-byte IV but the function restores AES BLOCK SIZE bytes, a buffer overrun occurs, leading to memory corruption within the kernel.

Recommendations Use crypto skcipher ivsize() to ensure only the algorithm's IV length is copied.