{"id":"CVE-2026-43033","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\n\nWhen decrypting data that is not in-place (src != dst), there is\nno need to save the …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\n\nWhen decrypting data that is not in-place (src != dst), there is\nno need to save the …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.3, < 5.10.254","linux_kernel >= 5.11, < 5.15.204","linux_kernel >= 5.16, < 6.1.170","linux_kernel >= 6.2, < 6.6.137","linux_kernel >= 6.7, < 6.12.85","linux_kernel >= 6.13, < 6.18.22","linux_kernel >= 6.19, < 6.19.12","linux_kernel = 7.0"],"patched":["linux_kernel 6.19.12"],"published":"2026-05-01","updated":"2026-10-15","sourceUpdated":"2026-10-15T02:19:26.957","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-43033","references":[{"url":"https://git.kernel.org/stable/c/153d5520c3f9fd62e71c7e7f9e34b59cf411e555","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/89fe118b6470119b20c04afc36e45b81a69ea11f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8c62f618576519dbed6816fafc623ce592953025","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/cded4002d22177e8deaca1f257ecd932c9582b6b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d0c4ff6812386880f30bc64c2921299cc4d7b47f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d589abd8b019b07075fda255ceab8c8e950cdb3f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e02494114ebf7c8b42777c6cd6982f113bfdbec7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00135,"epssPercentile":0.02975,"ingestedAt":"2026-09-08T15:33:26.989Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:13:46.097130Z"},"slug":"CVE-2026-43033","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\n\nWhen decrypting data that is not in-place (src != dst), there is\nno need to save the high-order sequence bits in dst as it could\nsimply be re-copied from the source.\n\nHowever, the data to be hashed need to be rearranged accordingly.\n\n\nThanks,\n\n## Affected\n\n- `linux_kernel >= 4.3, < 5.10.254`\n- `linux_kernel >= 5.11, < 5.15.204`\n- `linux_kernel >= 5.16, < 6.1.170`\n- `linux_kernel >= 6.2, < 6.6.137`\n- `linux_kernel >= 6.7, < 6.12.85`\n- `linux_kernel >= 6.13, < 6.18.22`\n- `linux_kernel >= 6.19, < 6.19.12`\n- `linux_kernel = 7.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.19.12`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}