CVE-2026-43078
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl When page reassignment was added to af_alg_pull_tsgl the original loop wasn't updated so it may try to reassign one…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.13%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl When page reassignment was added to af_alg_pull_tsgl the original loop wasn't updated so it may try to reassign one more page than necessary. Add the check to the reassignment so that this does not happen. Also update the comment which still refers to the obsolete offset argument.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.13% probability · 3th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/2b781d1d4f933990318bcc5c68fb75a717379e42Patch
- https://git.kernel.org/stable/c/31d00156e50ecad37f2cb6cbf04aaa9a260505efPatch
- https://git.kernel.org/stable/c/710a4ce5d7afd9fe082c75dec282ab4a11c0fe71Patch
- https://git.kernel.org/stable/c/9532501e0f1b200ea80baa0e33e0b06da10bb271Patch
- https://git.kernel.org/stable/c/c8369a6d62f5abde9cbd4b62c45bf4b996be2468Patch
- https://git.kernel.org/stable/c/dea5fcf085f977b6c2de1b2d4ec4767b6c840d1fPatch
- https://git.kernel.org/stable/c/f7826bc0b39928a4a22f6b815dd9940b22a63503Patch
- https://git.kernel.org/stable/c/fa48d3ea9cdbfb28c1fd6756c6c5cd01351aa51ePatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.