Dcad

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** An issue exists in the `authencesn` component of the crypto subsystem where the `crypto authenc esn create()` function fails to validate the `auth->digestsize` before copying it into `inst->alg.maxauthsize`. This allows the creation of instances with an invalid default `authsize` between 1 and 3 bytes when using an ahash with a corresponding digest size, such as `cbcmac(cipher null)`. Consequently, the `AF ALG` interface can trigger ESN tail handling with an insufficient tag length, leading to an out-of-bounds access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.