In the Linux kernel the af_alg cryptographic interface allowed an associated data (AD) length in authenticated encryption operations to exceed the value that the kernel correctly handled for transmit buffer size calculation. The lack of a maximum value caused an unsigned integer overflow, which could corrupt kernel memory or crash the system. The commit that resolved the issue caps the AD length to 0x80000000, preventing the wrap‑around and the associated corruption. This flaw is related to CWE‑190: Integer Overflow or Wraparound.

Linux kernel builds that do not include the commit adding the 0x80000000 cap on AEAD AD lengths are vulnerable. Any unpatched or custom kernel version compiled without this change remains at risk. The affected vendor is Linux, with the product being the kernel itself; affected versions are all that precede the introduction of the fix, as no specific release list is supplied.

The CVSS score of 5.5 indicates a medium severity vulnerability. The EPSS score of < 1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in CISA KEV. The description indicates that an unsigned integer overflow may occur when evaluating the TX buffer size for a particular cryptographic operation, but no explicit attack vector or exploitation scenario is documented in the public data. Therefore, precise exploitation conditions remain unspecified.