{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53016", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.378Z", "datePublished": "2026-06-24T16:29:26.272Z", "dateUpdated": "2026-09-16T12:04:14.313Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:32:39.711Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - copy IV using skcipher ivsize\n\nAF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.\n\nccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV\nbuffer while RFC3686 skciphers expose an 8-byte IV, so the restore\noverruns the provided buffer.\n\nUse crypto_skcipher_ivsize() to copy only the algorithm's IV length."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable CCP skcipher path is reached through local AF_ALG socket syscalls, not by processing remote packets. An attacker binds an AF_ALG skcipher socket to `rfc3686-ctr-aes-ccp` and submits a request locally.\nAC:L - Once the affected CCP algorithm is present, the trigger is a deterministic AF_ALG request with an 8-byte RFC3686 IV. No race or condition outside the attacker's control is required.\nPR:L - AF_ALG socket creation, bind, key setup, accept, sendmsg, and recvmsg have no capability checks, so a basic unprivileged local user can reach the bug. The driver-only flag can be selected through the allowed AF_ALG feature/mask fields.\nUI:N - Exploitation is entirely driven by the attacker's local syscalls. No separate victim action is required.\nS:U - The vulnerability corrupts kernel memory within the same kernel security authority. It does not cross a VM, IOMMU, or similar security boundary.\nC:H - The bug is an attacker-reachable kernel heap out-of-bounds write caused by copying 16 IV bytes into an 8-byte AF_ALG IV buffer. Kernel memory corruption can reasonably be developed into information disclosure primitives.\nI:H - The overwrite corrupts adjacent kernel heap memory from an unprivileged request path. As an out-of-bounds write, it is defensibly scored as potentially enabling arbitrary memory modification or control-flow compromise.\nA:H - Even without full exploitation, the heap corruption can crash or destabilize the kernel. Repeated unprivileged triggering can therefore cause high availability impact."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/ccp/ccp-crypto-aes.c"], "versions": [{"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "939061b2d0f7f15114e34b4ce878ef50ff4089c3", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "798d409a8949f3f495f238549b86de2886b129bd", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "dfb2cf434829819268fe50f41542aad318ad62b2", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "eecee15e263ccb8cd77170a56ab6c969cb54dd6a", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "bb01d8f1f385bc9034ca114d3508c7fdea24fc9a", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "df9784bb5b637ac80f4a2768a58ca9a50bef28a9", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "227c1e1d9e2aa4cfc65ba446d5690da1f546cda4", "status": "affected", "versionType": "git"}, {"version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "lessThan": "a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/ccp/ccp-crypto-aes.c"], "versions": [{"version": "3.14", "status": "affected"}, {"version": "0", "lessThan": "3.14", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/939061b2d0f7f15114e34b4ce878ef50ff4089c3"}, {"url": "https://git.kernel.org/stable/c/798d409a8949f3f495f238549b86de2886b129bd"}, {"url": "https://git.kernel.org/stable/c/dfb2cf434829819268fe50f41542aad318ad62b2"}, {"url": "https://git.kernel.org/stable/c/eecee15e263ccb8cd77170a56ab6c969cb54dd6a"}, {"url": "https://git.kernel.org/stable/c/bb01d8f1f385bc9034ca114d3508c7fdea24fc9a"}, {"url": "https://git.kernel.org/stable/c/df9784bb5b637ac80f4a2768a58ca9a50bef28a9"}, {"url": "https://git.kernel.org/stable/c/227c1e1d9e2aa4cfc65ba446d5690da1f546cda4"}, {"url": "https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4"}], "title": "crypto: ccp - copy IV using skcipher ivsize", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"affected": [{"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "kernel-rt", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected", "packageName": "kernel", "product": "Red Hat Enterprise Linux 6", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected", "packageName": "bpftool", "product": "Red Hat Enterprise Linux 7", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux AppStream (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.2::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-284.191.1.el9_2.aarch64", "product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.4::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-427.146.1.el9_4.aarch64", "product": "Red Hat Enterprise Linux AppStream E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux AppStream (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux BaseOS (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-553.156.1.el8_10.aarch64", "product": "Red Hat Enterprise Linux BaseOS (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_aus:8.4::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-305.206.1.el8_4.x86_64", "product": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-305.206.1.el8_4.x86_64", "product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_aus:8.6::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-372.208.1.el8_6.x86_64", "product": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-372.208.1.el8_6.x86_64", "product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_e4s:8.8::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-477.161.1.el8_8.ppc64le", "product": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_tus:8.8::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-477.161.1.el8_8.x86_64", "product": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_e4s:9.2::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:7.0.0-284.191.1.el9_2.aarch64", "product": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_e4s:9.4::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:7.3.0-427.146.1.el9_4.aarch64", "product": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_eus:9.6::baseos"], "defaultStatus": "unaffected", "packageName": "kernel-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9::baseos"], "defaultStatus": "unaffected", "packageName": "kernel-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux BaseOS (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:8::crb"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:4.18.0-553.156.1.el8_10.aarch64", "product": "Red Hat Enterprise Linux CRB (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::crb"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat CodeReady Linux Builder EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::crb"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-55.103.1.el10_0.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-211.34.1.el10_2.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:8::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:4.18.0-553.156.1.rt7.497.el8_10.x86_64", "product": "Red Hat Enterprise Linux NFV (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.2::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-284.191.1.rt14.476.el9_2.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.4::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-427.146.1.el9_4.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-570.135.1.el9_6.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-687.25.1.el9_8.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux Real Time EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux Real Time (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:8::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:4.18.0-553.156.1.rt7.497.el8_10.x86_64", "product": "Red Hat Enterprise Linux RT (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.2::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-284.191.1.rt14.476.el9_2.x86_64", "product": "Red Hat Enterprise Linux Real Time E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.4::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-427.146.1.el9_4.x86_64", "product": "Red Hat Enterprise Linux Real Time E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat Enterprise Linux Real Time EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux Real Time (v. 9)", "vendor": "Red Hat"}], "datePublic": "2026-06-24T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "A flaw was found in the Linux kernel's cryptographic coprocessor (CCP) driver. When processing AF_ALG rfc3686-ctr-aes-ccp requests, the ccp_aes_complete() function attempts to restore more data than the allocated buffer for the Initialization Vector (IV) can hold. This leads to a buffer overrun, which can result in memory corruption within the kernel."}], "metrics": [{"other": {"content": {"namespace": "https://access.redhat.com/security/updates/classification/", "value": "Moderate"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-805", "description": "Buffer Access with Incorrect Length Value", "lang": "en", "type": "CWE"}]}], "references": [{"tags": ["vdb-entry", "x_refsource_REDHAT"], "url": "https://access.redhat.com/security/cve/CVE-2026-53016"}, {"name": "RHBZ#2492269", "tags": ["issue-tracking", "x_refsource_REDHAT"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492269"}, {"tags": ["x_sadp-csaf-vex"], "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53016.json"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:64767"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:39494"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:67723"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:59544"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:56574"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:38491"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:55764"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:65710"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:59473"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:61256"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:55765"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:67721"}], "solutions": [{"lang": "en", "value": "RHSA-2026:64767: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)"}, {"lang": "en", "value": "RHSA-2026:39494: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)"}, {"lang": "en", "value": "RHSA-2026:67723: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"}, {"lang": "en", "value": "RHSA-2026:59544: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4), Red Hat Enterprise Linux Real Time E4S (v.9.4), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)"}, {"lang": "en", "value": "RHSA-2026:56574: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)"}, {"lang": "en", "value": "RHSA-2026:38491: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"}, {"lang": "en", "value": "RHSA-2026:55764: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"}, {"lang": "en", "value": "RHSA-2026:65710: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"}, {"lang": "en", "value": "RHSA-2026:59473: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)"}, {"lang": "en", "value": "RHSA-2026:61256: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"}, {"lang": "en", "value": "RHSA-2026:55765: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"}, {"lang": "en", "value": "RHSA-2026:67721: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)"}], "timeline": [{"lang": "en", "time": "2026-06-24T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-06-24T00:00:00.000Z", "value": "Made public."}], "title": "kernel: crypto: ccp - copy IV using skcipher ivsize", "workarounds": [{"lang": "en", "value": "To mitigate this issue, prevent module ccp-crypto from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}], "x_adpType": "supplier", "x_generator": {"engine": "sadp-cli 1.0.0"}, "providerMetadata": {"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "shortName": "redhat-SADP", "dateUpdated": "2026-09-16T12:04:14.313Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/crypto/ccp/ccp-crypto-aes.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "939061b2d0f7f15114e34b4ce878ef50ff4089c3", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "798d409a8949f3f495f238549b86de2886b129bd", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "dfb2cf434829819268fe50f41542aad318ad62b2", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "eecee15e263ccb8cd77170a56ab6c969cb54dd6a", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "bb01d8f1f385bc9034ca114d3508c7fdea24fc9a", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "df9784bb5b637ac80f4a2768a58ca9a50bef28a9", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "227c1e1d9e2aa4cfc65ba446d5690da1f546cda4", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}, {"lessThan": "a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4", "status": "affected", "version": "2b789435d7f36ed918d92db647f3a2f3fec9bb1f", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/crypto/ccp/ccp-crypto-aes.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.14"}, {"lessThan": "3.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.258", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.209", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.175", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.141", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.91", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.33", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"affectedData": [{"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "kernel-rt", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "unaffected", "packageName": "kernel", "product": "Red Hat Enterprise Linux 6", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "unaffected", "packageName": "bpftool", "product": "Red Hat Enterprise Linux 7", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux AppStream (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.2::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-284.191.1.el9_2.aarch64", "product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.4::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-427.146.1.el9_4.aarch64", "product": "Red Hat Enterprise Linux AppStream E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "defaultStatus": "unaffected", "packageName": "kernel-64k-debug-devel-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux AppStream (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux BaseOS (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-553.156.1.el8_10.aarch64", "product": "Red Hat Enterprise Linux BaseOS (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_aus:8.4::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-305.206.1.el8_4.x86_64", "product": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-305.206.1.el8_4.x86_64", "product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_aus:8.6::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-372.208.1.el8_6.x86_64", "product": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-372.208.1.el8_6.x86_64", "product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_e4s:8.8::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-477.161.1.el8_8.ppc64le", "product": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_tus:8.8::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:4.18.0-477.161.1.el8_8.x86_64", "product": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_e4s:9.2::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:7.0.0-284.191.1.el9_2.aarch64", "product": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_e4s:9.4::baseos"], "defaultStatus": "unaffected", "packageName": "bpftool-0:7.3.0-427.146.1.el9_4.aarch64", "product": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:rhel_eus:9.6::baseos"], "defaultStatus": "unaffected", "packageName": "kernel-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9::baseos"], "defaultStatus": "unaffected", "packageName": "kernel-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux BaseOS (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:8::crb"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:4.18.0-553.156.1.el8_10.aarch64", "product": "Red Hat Enterprise Linux CRB (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::crb"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat CodeReady Linux Builder EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::crb"], "defaultStatus": "unaffected", "packageName": "kernel-tools-libs-devel-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-55.103.1.el10_0.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-211.34.1.el10_2.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:8::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:4.18.0-553.156.1.rt7.497.el8_10.x86_64", "product": "Red Hat Enterprise Linux NFV (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.2::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-284.191.1.rt14.476.el9_2.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.4::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-427.146.1.el9_4.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-570.135.1.el9_6.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::nfv"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-687.25.1.el9_8.x86_64", "product": "Red Hat Enterprise Linux Real Time for NFV (v. 9)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux_eus:10.0"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-55.103.1.el10_0.aarch64", "product": "Red Hat Enterprise Linux Real Time EUS (v. 10.0)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:6.12.0-211.34.1.el10_2.aarch64", "product": "Red Hat Enterprise Linux Real Time (v. 10)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:8::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:4.18.0-553.156.1.rt7.497.el8_10.x86_64", "product": "Red Hat Enterprise Linux RT (v. 8)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.2::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-284.191.1.rt14.476.el9_2.x86_64", "product": "Red Hat Enterprise Linux Real Time E4S (v.9.2)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_e4s:9.4::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-427.146.1.el9_4.x86_64", "product": "Red Hat Enterprise Linux Real Time E4S (v.9.4)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:rhel_eus:9.6::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-570.135.1.el9_6.aarch64", "product": "Red Hat Enterprise Linux Real Time EUS (v.9.6)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:enterprise_linux:9::realtime"], "defaultStatus": "unaffected", "packageName": "kernel-rt-0:5.14.0-687.25.1.el9_8.aarch64", "product": "Red Hat Enterprise Linux Real Time (v. 9)", "vendor": "Red Hat"}], "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "15179687-2CB2-46FF-A55A-8E6CD5A54B85", "versionEndExcluding": "5.10.258", "versionStartIncluding": "3.14", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "919C10A9-7951-4A74-BADD-C135A0A8D8B4", "versionEndExcluding": "5.15.209", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92385813-D91D-480D-83A1-F423D2CBB2BA", "versionEndExcluding": "6.1.175", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "97A9FFFA-22BB-4D5C-9790-5A2286E392F7", "versionEndExcluding": "6.6.141", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C918746B-DE6F-448F-A93E-A04C5481688D", "versionEndExcluding": "6.12.91", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "96D99E49-380D-43AB-BDBA-25C3AD018A9C", "versionEndExcluding": "6.18.33", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A13475D2-59BF-4716-94B5-7C1D239A2CF4", "versionEndExcluding": "7.0.10", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - copy IV using skcipher ivsize\n\nAF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.\n\nccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV\nbuffer while RFC3686 skciphers expose an 8-byte IV, so the restore\noverruns the provided buffer.\n\nUse crypto_skcipher_ivsize() to copy only the algorithm's IV length."}], "id": "CVE-2026-53016", "lastModified": "2026-09-16T13:18:01.940", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "type": "Secondary"}]}, "published": "2026-06-24T17:17:12.893", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/227c1e1d9e2aa4cfc65ba446d5690da1f546cda4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/798d409a8949f3f495f238549b86de2886b129bd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/939061b2d0f7f15114e34b4ce878ef50ff4089c3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bb01d8f1f385bc9034ca114d3508c7fdea24fc9a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/df9784bb5b637ac80f4a2768a58ca9a50bef28a9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/dfb2cf434829819268fe50f41542aad318ad62b2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/eecee15e263ccb8cd77170a56ab6c969cb54dd6a"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:38491"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:39494"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:55764"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:55765"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:56574"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:59473"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:59544"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:61256"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:64767"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:65710"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:67721"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:67723"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2026-53016"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492269"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Third Party Advisory"], "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53016.json"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-805"}], "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: crypto: ccp - copy IV using skcipher ivsize", "id": "2492269", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492269"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-805", "details": ["A flaw was found in the Linux kernel's cryptographic coprocessor (CCP) driver. When processing AF_ALG rfc3686-ctr-aes-ccp requests, the ccp_aes_complete() function attempts to restore more data than the allocated buffer for the Initialization Vector (IV) can hold. This leads to a buffer overrun, which can result in memory corruption within the kernel."], "name": "CVE-2026-53016", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-06-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53016\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53016\nhttps://lore.kernel.org/linux-cve-announce/2026062451-CVE-2026-53016-90ac@gregkh/T"], "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,939061b2d0f7f15114e34b4ce878ef50ff4089c3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,798d409a8949f3f495f238549b86de2886b129bd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,dfb2cf434829819268fe50f41542aad318ad62b2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,eecee15e263ccb8cd77170a56ab6c969cb54dd6a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,bb01d8f1f385bc9034ca114d3508c7fdea24fc9a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,df9784bb5b637ac80f4a2768a58ca9a50bef28a9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,227c1e1d9e2aa4cfc65ba446d5690da1f546cda4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b789435d7f36ed918d92db647f3a2f3fec9bb1f,a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.14"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,3.14)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[5.10.258,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[5.15.209,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.175,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.141,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.91,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.33,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0.10,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-06-24T19:00:06.719727+00:00", "updated": "2026-08-12T06:30:17.208437+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}