UBUNTU-CVE-2026-74578

In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...

CVE-2026-74578

CVE-2026-74578 affects the Linux kernel crypto/algif_skcipher path. The AIO/async path in skcipher_recvmsg() could expose an attacker-controlled IV by overwriting ctx->iv via concurrent ALG_SET_IV writes, enabling IV/keystream reuse for CTR/stream modes and potentially plaintext recovery of co...