CVE-2026-52972
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Cap AEAD AD length to 0x80000000
In order to prevent arithmetic overflows when checking the TX
buffer size, cap the associated data length to 0x80000000.
Summary dbcve.org
The Linux kernel's af_alg (Algorithm Framework) crypto interface did not properly bound the AEAD (Authenticated Encryption with Associated Data) associated data length when checking TX buffer sizes. Without a cap, extremely large AD lengths could cause arithmetic overflows in buffer size calculations, potentially leading to buffer overflows or incorrect memory operations. The fix caps AD length to 0x80000000 (2GB) to prevent these overflows.
Mitigation
Apply Linux kernel security updates that include the AEAD AD length cap to 0x80000000 in the af_alg crypto module. This is a kernel-level patch requiring system reboot after update deployment.