https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 13:55:18 +0000 https://vulnerability.circl.lu/vuln/cve-2026-53016 <p><strong>Affected:</strong> Linux, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux AppStream (v. 9) and 32 more</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: ccp - copy IV using skcipher ivsize</p> <p>AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.</p> <p>ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller&#39;s IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer.</p> <p>Use crypto_skcipher_ivsize() to copy only the algorithm&#39;s IV length.</p> <p><strong>Affected:</strong> Linux, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux AppStream (v. 9) and 32 more</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: ccp - copy IV using skcipher ivsize</p> <p>AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.</p> <p>ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller&#39;s IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer.</p> <p>Use crypto_skcipher_ivsize() to copy only the algorithm&#39;s IV length.</p> https://vulnerability.circl.lu/vuln/cve-2026-53016