PT-2026-35137 · Linux · Linux

Published 2026-04-25 · Updated 2026-04-25 · CVE-2026-31677

Mitre

In the Linux kernel, the following vulnerability has been resolved:

crypto: af alg - limit RX SG extraction by receive buffer budget

Make af alg get rsgl() limit each RX scatterlist extraction to the remaining receive buffer budget.

af alg get rsgl() currently uses af alg readable() only as a gate before extracting data into the RX scatterlist. Limit each extraction to the remaining af alg rcvbuf(sk) budget so that receive-side accounting matches the amount of data attached to the request.

If skcipher cannot obtain enough RX space for at least one chunk while more data remains to be processed, reject the recvmsg call instead of rounding the request length down to zero.

Related Identifiers

CVE-2026-31677

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-31677 · Security Note
• https://git.kernel.org/stable/c/07c6f6ffe29009426f0bd4d3cfbb6308b8ea8453 · Note
• https://git.kernel.org/stable/c/9bf3e6ccfdcfe56ae3190d1ae987dacf1cfef4f9 · Note
• https://git.kernel.org/stable/c/8eceab19eba9dcbfd2a0daec72e1bf48aa100170 · Note
• https://git.kernel.org/stable/c/4a264b2614c73c96666e196bbabe0cead52bdba7 · Note