High · published April 22, 2026
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 88.9th percentile for exploit probability.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.14, < 5.10.254 | 5.10.254 |
| linux/linux_kernel | ≥ 5.11, < 5.15.204 | 5.15.204 |
| linux/linux_kernel | ≥ 5.16, < 6.1.170 | 6.1.170 |
| linux/linux_kernel | ≥ 6.2, < 6.6.137 | 6.6.137 |
| linux/linux_kernel | ≥ 6.7, < 6.12.85 | 6.12.85 |
| linux/linux_kernel | ≥ 6.13, < 6.18.22 | 6.18.22 |
| linux/linux_kernel | ≥ 6.19, < 6.19.12 | 6.19.12 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| redhat/openshift_container_platform | ≥ 4.12, < 4.12.89 | 4.12.89 |
| redhat/openshift_container_platform | ≥ 4.13, < 4.13.66 | 4.13.66 |
| redhat/openshift_container_platform | ≥ 4.14, < 4.14.65 | 4.14.65 |
| redhat/openshift_container_platform | ≥ 4.15, < 4.15.64 | 4.15.64 |
| redhat/openshift_container_platform | ≥ 4.16, < 4.16.61 | 4.16.61 |
| redhat/openshift_container_platform | ≥ 4.17, < 4.17.53 | 4.17.53 |
| redhat/openshift_container_platform | ≥ 4.18, < 4.18.40 | 4.18.40 |
| redhat/openshift_container_platform | ≥ 4.19, < 4.19.30 | 4.19.30 |
| redhat/openshift_container_platform | ≥ 4.20, < 4.20.21 | 4.20.21 |
| redhat/openshift_container_platform | ≥ 4.21, < 4.21.14 | 4.21.14 |
| redhat/openshift_container_platform | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux_aus | all versions | — |
| redhat/enterprise_linux_aus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_tus | all versions | — |
| redhat/enterprise_linux_tus | all versions | — |
| redhat/enterprise_linux_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_update_services_for_sap_solutions | all versions | — |
| amazon/amazon_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| suse/caas_platform | all versions | — |
| suse/enterprise_storage | all versions | — |
| suse/enterprise_storage | all versions | — |
| suse/enterprise_storage | all versions | — |
| suse/manager_proxy | all versions | — |
| suse/manager_proxy | all versions | — |
| suse/manager_proxy | all versions | — |
| suse/manager_proxy | all versions | — |
| suse/manager_retail_branch_server | all versions | — |
| suse/manager_retail_branch_server | all versions | — |
| suse/manager_retail_branch_server | all versions | — |
| suse/manager_retail_branch_server | all versions | — |
| suse/manager_server | all versions | — |
| suse/manager_server | all versions | — |
| suse/manager_server | all versions | — |
| suse/manager_server | all versions | — |
| suse/openstack_cloud | all versions | — |
| suse/openstack_cloud_crowbar | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/basesystem_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/development_tools_module | all versions | — |
| suse/legacy_module | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_high_availability_extension | all versions | — |
| suse/linux_enterprise_high_availability_extension | all versions | — |
| suse/linux_enterprise_high_availability_extension | all versions | — |
| suse/linux_enterprise_high_availability_extension | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_high_performance_computing | all versions | — |
| suse/linux_enterprise_live_patching | all versions | — |
| suse/linux_enterprise_live_patching | all versions | — |
| suse/linux_enterprise_live_patching | all versions | — |
| suse/linux_enterprise_live_patching | all versions | — |
| suse/linux_enterprise_live_patching | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_micro | all versions | — |
| suse/linux_enterprise_real_time | all versions | — |
| suse/linux_enterprise_real_time | all versions | — |
| suse/linux_enterprise_real_time | all versions | — |
| suse/linux_enterprise_real_time | all versions | — |
| suse/linux_enterprise_real_time | all versions | — |
| suse/linux_enterprise_real_time | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_workstation_extension | all versions | — |
| suse/linux_micro | all versions | — |
| suse/linux_micro | all versions | — |
| suse/linux_micro | all versions | — |
| suse/public_cloud_module | all versions | — |
| suse/public_cloud_module | all versions | — |
| suse/realtime_module | all versions | — |
| suse/realtime_module | all versions | — |
| suse/realtime_module | all versions | — |
| suse/realtime_module | all versions | — |
| suse/realtime_module | all versions | — |
| nixos/nixos | < 25.11 | 25.11 |
| arista/cloudvision_agni | ≥ 2024.4.0, ≤ 2025.2.2 | — |
| arista/cloudvision_portal | ≥ 2024.2.0, ≤ 2026.1.0 | — |
| arista/velocloud_edge | ≥ 4.5.0, ≤ 6.4.1 | — |
| arista/velocloud_gateway | all versions | — |
| arista/velocloud_orchestrator | all versions | — |
| arista/netvisor_os | < 7.1.0 | 7.1.0 |
| arista/netvisor_os | all versions | — |
| arista/netvisor_os | all versions | — |
| siemens/simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | ≥ 3.1.5 | — |
| siemens/simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware | ≥ 3.1.5 | — |
| siemens/siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | ≥ 3.1.5 | — |
| siemens/simatic_s7-1500_tm_mfp_firmware | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| siemens/simatic_cn_4100_firmware | < 6.0 | 6.0 |
| siemens/simatic_ax_runtime | all versions | — |
| siemens/simatic_hmi_unified_comfort_panels_firmware | < 21.0 | 21.0 |
| siemens/simatic_hmi_unified_comfort_panels_firmware | all versions | — |
| siemens/simatic_hmi_unified_comfort_panels_firmware | all versions | — |
| siemens/simatic_hmi_unified_comfort_panels_firmware | all versions | — |
| siemens/simatic_iot2050_advanced_firmware | all versions | — |
| siemens/simatic_ipc_ied-os | all versions | — |