CVE-2026-23060

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the authencesn component. The authencesn component assumes an ESP/ESN-formatted AAD (Associated Authentication Data). If the assoclen is less than the minimum expected length, the crypto authenc esn decrypt() function may move beyond the end of the destination scatterlist, resulting in a NULL pointer dereference within the scatterwalk map and copy() function. This can lead to a kernel panic, causing a denial-of-service (DoS) condition. A check for the minimum AAD length has been added to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.