HIGHVulnerability
CVE-2026-53016
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.
Properties
- severity
- HIGH
- score
- 7.8
- cve_id
- CVE-2026-53016
- vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- published_at
- 2026-06-24T17:17:12.893
- last_modified
- 2026-08-18T12:19:25.760
Related Entities (4)
DESCRIBED_BY (1)
→[Source]NVD
AFFECTS_PRODUCT (1)
→[Product]
HAS_WEAKNESS (2)
→[Weakness]Buffer Access with Incorrect Length Value
→[Weakness]Out-of-bounds Write
Explore deeper with Ninja Signal's threat intelligence graph