CVE-2026-43078CWE-787

CVE-2026-43078

High · published May 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

When page reassignment was added to af_alg_pull_tsgl the original

loop wasn't updated so it may try to reassign one more page than

necessary.

Add the check to the reassignment so that this does not happen.

Also update the comment which still refers to the obsolete offset

argument.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-05-06T14:16Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≥ 4.14.1, < 5.10.2545.10.254
linux/linux_kernel≥ 5.11, < 5.15.2045.15.204
linux/linux_kernel≥ 5.16, < 6.1.1706.1.170
linux/linux_kernel≥ 6.2, < 6.6.1376.6.137
linux/linux_kernel≥ 6.7, < 6.12.856.12.85
linux/linux_kernel≥ 6.13, < 6.18.246.18.24
linux/linux_kernel≥ 6.19, < 6.19.146.19.14
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 06 MAY 07:40Z
    crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
    cvelistv5