CVE-2026-80544

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The zcrypt msgtype6 send ep11 cprb() function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload. This approach assumes a fixed payload structure and fails to validate the actual ASN.1 encoding (a standard for describing data structures). Additionally, the length format detection logic is error-prone and lacks proper bounds validation at each parsing step, while direct struct member access bypasses necessary ASN.1 validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.