A race condition in the AF_ALG socket path (CWE‑1204) allows an unprivileged user to influence the initialization vector of an in‑flight cryptographic request. By sending an ALG_SET_IV ioctl concurrently with an asynchronous skcipher operation, the attacker can overwrite the socket‑wide IV. In CTR or stream modes this leads to IV/keystream reuse, enabling the attacker to recover plaintext from concurrent encryption.

Based on the description, it is inferred that all Linux kernels that expose the AF_ALG async skcipher path before the commit that removes the AIO branch from crypto/algif_skcipher.c are affected. The issue is present in kernels older than the commit included in the 6.6 kernel series and earlier releases. No specific affected version information was supplied.

The flaw is local and requires the attacker to use both a cryptographic request and an ALG_SET_IV ioctl on the same AF_ALG socket. The EPSS score is < 1%, indicating a very low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. The CVSS score of 7.1 reflects a high impact, as successful exploitation would allow plaintext disclosure for operations performed by the affected user.