CVE-2026-53016crypto: ccp - copy IV using skcipher ivsize
Updated under an hour ago ()
Does this affect you?
It affects Linux and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-805
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before 939061b2d0f7f15114e34b4ce878ef50ff4089c3; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before 798d409a8949f3f495f238549b86de2886b129bd; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before dfb2cf434829819268fe50f41542aad318ad62b2; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before eecee15e263ccb8cd77170a56ab6c969cb54dd6a; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before bb01d8f1f385bc9034ca114d3508c7fdea24fc9a; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before df9784bb5b637ac80f4a2768a58ca9a50bef28a9; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before 227c1e1d9e2aa4cfc65ba446d5690da1f546cda4; from 2b789435d7f36ed918d92db647f3a2f3fec9bb1f before a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4 | CNA record |
Red Hat Red Hat Enterprise Linux 9 redhat:enterprise_linux | 9 | CISA ADP |
Red Hat Red Hat Enterprise Linux AppStream EUS (v. 10.0) redhat:enterprise_linux_eus | 10.0 | CISA ADP |
Red Hat Red Hat Enterprise Linux AppStream E4S (v.9.2) redhat:rhel_e4s | 9.2 | CISA ADP |
Red Hat Red Hat Enterprise Linux AppStream EUS (v.9.6) redhat:rhel_eus | 9.6 | CISA ADP |
Red Hat Red Hat Enterprise Linux BaseOS AUS (v.8.4) redhat:rhel_aus | 8.4 | CISA ADP |
Red Hat Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) redhat:rhel_eus_long_life | 8.4 | CISA ADP |
Red Hat Red Hat Enterprise Linux BaseOS TUS (v.8.8) redhat:rhel_tus | 8.8 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 3.14 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10 | NVD |
References
- https://git.kernel.org/stable/c/939061b2d0f7f15114e34b4ce878ef50ff4089c3patch
- https://git.kernel.org/stable/c/798d409a8949f3f495f238549b86de2886b129bdpatch
- https://git.kernel.org/stable/c/dfb2cf434829819268fe50f41542aad318ad62b2patch
- https://git.kernel.org/stable/c/eecee15e263ccb8cd77170a56ab6c969cb54dd6apatch
- https://git.kernel.org/stable/c/bb01d8f1f385bc9034ca114d3508c7fdea24fc9apatch
- https://git.kernel.org/stable/c/df9784bb5b637ac80f4a2768a58ca9a50bef28a9patch
- https://git.kernel.org/stable/c/227c1e1d9e2aa4cfc65ba446d5690da1f546cda4patch
- https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4patch
- https://access.redhat.com/errata/RHSA-2026:38491third-party-advisory
- https://access.redhat.com/errata/RHSA-2026:39494third-party-advisory
- https://access.redhat.com/errata/RHSA-2026:55764
- https://access.redhat.com/errata/RHSA-2026:55765
- https://access.redhat.com/errata/RHSA-2026:56574
- https://access.redhat.com/errata/RHSA-2026:59473
- https://access.redhat.com/errata/RHSA-2026:59544
- https://access.redhat.com/errata/RHSA-2026:61256
- https://access.redhat.com/errata/RHSA-2026:64767
- https://access.redhat.com/errata/RHSA-2026:65710
- https://access.redhat.com/errata/RHSA-2026:67721
- https://access.redhat.com/errata/RHSA-2026:67723
- https://access.redhat.com/security/cve/CVE-2026-53016third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2492269third-party-advisory
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53016.jsonthird-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.