CVE-2026-43033

A flaw was found in the Linux kernel's authencesn cryptographic module. When performing out-of-place decryption (where source and destination data buffers are different), the system incorrectly handles high-order sequence bits. This leads to improper data rearrangement before hashing, which could potentially affect the integrity of cryptographic operations.

This flaw is rated as Moderate severity because exploitation requires local access or an existing cryptographic session configured for out-of-place decryption, limiting the risk of remote unauthenticated compromise. In standard Red Hat Enterprise Linux deployments, IPsec and kernel cryptographic operations typically execute in-place transformations, making vulnerable out-of-place buffer handling uncommon. An authenticated local user or compromised session able to invoke this cipher algorithm could cause cryptographic verification failures or kernel instability leading to a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.