The Linux kernel’s af_alg protocol exposed an unchecked length for associated data in an AEAD operation. During the calculation of the transmit buffer size, if the length exceeded 0x80000000, an arithmetic overflow could occur, potentially corrupting kernel memory or turning the system into a denial‑of‑service state. A kernel patch now limits the associated data length to 0x80000000, preventing that wraparound and the associated corruption.

Any Linux kernel build that does not include the commit adding the 0x80000000 cap on AEAD associated data is vulnerable. This includes all unpatched or custom kernel versions that predate the introduction of the fix. The CNA lists Linux kernel as the affected vendor, so any such kernel that remains in this state is at risk.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, so no public exploit has been documented. Nevertheless, if an af_alg socket is reachable by an attacker, a crafted AEAD payload could trigger the overflow, potentially causing a kernel crash or reboot. The risk is confined to environments that use the af_alg interface and run unpatched kernel versions.