Search/CVE-2026-43077
● CVE — Medium

CVE-2026-43077

VendorlinuxProductlinux kernelDiscoveredMay 6, 2026UpdatedMay 20, 2026

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the required extra length.

CVSS v3.1
5.5 MEDIUM
EPSS
0.12%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
19
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 25, 2026 → Oct 26, 2026
▼ 0.04pp
0.16% → 0.12% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
20 relationships
Timeline
disclosure → media coverage
May 6, 2026
Disclosure — published as a CVE record. · last revised by NVD May 20, 2026
May 19, 2026
ubuntu.com reports: USN-8277-1: Linux kernel vulnerabilities
May 19, 2026
ubuntu.com reports: USN-8278-1: Linux kernel vulnerabilities
May 19, 2026
ubuntu.com reports: USN-8279-1: Linux kernel vulnerabilities
May 19, 2026
ubuntu.com reports: USN-8280-1: Linux kernel vulnerabilities
May 19, 2026
ubuntu.com reports: USN-8281-1: Linux kernel vulnerabilities
May 20, 2026
ubuntu.com reports: USN-8289-1: Linux kernel (NVIDIA) vulnerabilities
May 22, 2026
ubuntu.com reports: USN-8277-2: Linux kernel (Oracle) vulnerabilities
May 22, 2026
ubuntu.com reports: USN-8279-2: Linux kernel (GCP) vulnerabilities
May 25, 2026
ubuntu.com reports: USN-8279-3: Linux kernel (NVIDIA Tegra IGX) vulnerabilities
May 25, 2026
ubuntu.com reports: USN-8305-1: Linux kernel (Intel IoTG Real-time) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8310-1: Linux kernel (Azure) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8278-2: Linux kernel (Azure) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8305-2: Linux kernel (Low Latency) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8280-3: Linux kernel (IoT) vulnerabilities
Jun 2, 2026
ubuntu.com reports: USN-8374-1: Linux kernel vulnerabilities
Jun 11, 2026
ubuntu.com reports: USN-8426-1: Linux kernel (Azure) vulnerabilities
Jul 2, 2026
ubuntu.com reports: USN-8499-1: Linux kernel (Xilinx) vulnerabilities
Jul 6, 2026
ubuntu.com reports: USN-8508-1: Linux kernel (NVIDIA) vulnerabilities
Jul 10, 2026
ubuntu.com reports: USN-8528-1: Linux kernel (Xilinx ZynqMP) vulnerabilities