The Linux kernel’s af_alg protocol exposed an unchecked length for associated data in an AEAD operation. During the calculation of the transmit buffer size, if the length exceeded 0x occur, potentially corrupting kernel memory or turning the system into a denial‑of‑service state. A kernel patch now limits the associated data length to 0x80000000, preventing that wraparound and the associated corruption.

Any Linux kernel build that does not include the commit adding the 0x80000000 cap on AEAD associated data is vulnerable. This includes all unpatched or custom kernel versions that predate the introduction of the fix. The CNA lists Linux kernel as the affected vendor, so any such kernel that remains in this state is at risk.

of 7.0 indicates a medium severity vulnerability. The EPSS score of < 1% suggests a very low likelihood of exploitation. Based on the description, it is inferred that if an af_alg socket is reachable by an attacker, a crafted AEAD payload could trigger the overflow, potentially causing a kernel crash or reboot. The risk is confined to the af_alg interface and applies only to unpatched kernel versions.