CVE-2026-53016

Undergoing Analysis Undergoing Analysis - In Progress

Buffer Overrun in Linux Kernel Crypto CCP Driver

Publication date: 2026-06-24

Last updated on: 2026-07-15

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-06-24

EPSS Evaluated

2026-08-02

NVD

CVE-2026-53016

EUVD

EUVD-2026-38884

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.2 (inc) to 6.6.141 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.91 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.33 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.175 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.209 (exc)
linux	linux_kernel	From 3.14 (inc) to 5.10.258 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.
CWE-805	The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's crypto subsystem, specifically in the ccp driver handling AES encryption with the rfc3686-ctr-aes-ccp algorithm. The issue arises because the driver expects an 8-byte initialization vector (IV) but incorrectly copies AES_BLOCK_SIZE (which is larger) bytes back into the IV buffer. This causes a buffer overrun since the buffer only has space for 8 bytes.

The root cause is that the function ccp_aes_complete() restores more bytes than the IV buffer can hold, leading to memory corruption. The fix involves using the correct IV size by calling crypto_skcipher_ivsize() to ensure only the appropriate number of bytes are copied.

Impact Analysis

This vulnerability can lead to a buffer overrun in the kernel's crypto driver, which may cause memory corruption. Such memory corruption can potentially be exploited to cause system instability, crashes, or even allow an attacker to execute arbitrary code with kernel privileges.

Because this occurs in the cryptographic subsystem, it might also affect the integrity and confidentiality of encrypted data processed by the affected driver.

Mitigation Strategies

The vulnerability has been resolved in the Linux kernel by correcting the way the IV (Initialization Vector) is copied in the crypto ccp driver. To mitigate this vulnerability, you should update your Linux kernel to a version that includes this fix.

Specifically, ensure your system is running a Linux kernel version released on or after 2026-06-24 that applies the fix where crypto_skcipher_ivsize() is used to copy only the algorithm's IV length, preventing buffer overruns.

Hi! I’m here to help you understand CVE-2026-53016. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70