PT-2026-37387 · Linux+3 · Linux Kernel+3

Published 2026-05-06 · Updated 2026-06-16 · CVE-2026-43077

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the algif aead component of the crypto subsystem where the minimum receive buffer size check during decryption fails to account for the tag size. This is resolved by adding the required extra length to the check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43077

RHSA-2026:13565

RHSA-2026:13566

RHSA-2026:13577

RHSA-2026:13578

RHSA-2026:13681

RHSA-2026:13734

RHSA-2026:13887

RHSA-2026:13932

RHSA-2026:13936

RHSA-2026:14137

RHSA-2026:14165

RHSA-2026:14230

RHSA-2026:14301

RHSA-2026:14339

USN-8277-1

USN-8277-2

USN-8278-1

USN-8278-2

USN-8279-1

USN-8279-2

USN-8279-3

USN-8280-1

USN-8280-2

USN-8280-3

USN-8281-1

USN-8281-2

USN-8289-1

USN-8289-2

USN-8305-1

USN-8305-2

USN-8310-1

USN-8350-1

USN-8351-1

USN-8374-1

USN-8391-1

USN-8392-1

USN-8393-1

USN-8426-1

USN-8426-2

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Rocky Linux

Ubuntu

References · 482

• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68773 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23001 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43077 · Security Note
• https://osv.dev/vulnerability/USN-8281-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8279-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68808 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:13565 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71075 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46323 · Vendor Advisory