CVE-2026-31719

A flaw was found in the krb5enc module of the Linux kernel's crypto subsystem. When performing asynchronous decryption, the krb5enc_dispatch_decrypt() function incorrectly bypasses the integrity verification (hash check). This issue occurs because the skcipher completion handler signals completion without executing the necessary hash verification, potentially allowing an attacker to manipulate data without detection.

Kerberos5 transform async decrypt must not skip hash verification; skipping breaks integrity guarantees for krb5enc users. Red Hat recommends patched kernels for IPsec or other consumers of this crypto template.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.