In the Linux kernel, the following vulnerability has been resolved:

crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than
the minimum expected length, crypto_authenc_esn_decrypt() can advance past
the end of the destination scatterlist and trigger a NULL pointer dereference
in scatterwalk_map_and_copy(), leading to a kernel panic (DoS).

Add a minimum AAD length check to fail fast on invalid inputs.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00032.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < df22c9a65e9a9daa368a72fed596af9d7d5876bb
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < fee86edf5803f1d1f19e3b4f2dacac241bddfa48
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < 767e8349f7e929b7dd95c08f0b4cb353459b365e
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < b0a9609283a5c852addb513dafa655c61eebc1ef
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < 161bdc90fce25bd9890adc67fa1c8563a7acbf40
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < 9532ff0d0e90ff78a214299f594ab9bac81defe4
104880a6b470958ddc30e139c41aa4f6ed3a5234 affected < 2397e9264676be7794f8f7f1e9763d90bd3c7335
Linux Linux affected
Version Status Constraints
4.3 affected —
0 unaffected < 4.3
5.10.249 unaffected ≤ 5.10.*
5.15.199 unaffected ≤ 5.15.*
6.1.162 unaffected ≤ 6.1.*
6.6.122 unaffected ≤ 6.6.*
6.12.68 unaffected ≤ 6.12.*
6.18.8 unaffected ≤ 6.18.*
6.19 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4475-1 linux security update
Debian DLA Debian DLA DLA-4476-1 linux-6.1 security update
Debian DSA Debian DSA DSA-6126-1 linux security update
Debian DSA Debian DSA DSA-6127-1 linux security update
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/161bdc90fce25bd9890adc67fa1c8563a7acbf40 cve-icon cve-icon
https://git.kernel.org/stable/c/2397e9264676be7794f8f7f1e9763d90bd3c7335 cve-icon cve-icon
https://git.kernel.org/stable/c/767e8349f7e929b7dd95c08f0b4cb353459b365e cve-icon cve-icon
https://git.kernel.org/stable/c/9532ff0d0e90ff78a214299f594ab9bac81defe4 cve-icon cve-icon
https://git.kernel.org/stable/c/b0a9609283a5c852addb513dafa655c61eebc1ef cve-icon cve-icon
https://git.kernel.org/stable/c/df22c9a65e9a9daa368a72fed596af9d7d5876bb cve-icon cve-icon
https://git.kernel.org/stable/c/fee86edf5803f1d1f19e3b4f2dacac241bddfa48 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026020414-CVE-2026-23060-6a41@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-23060 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-23060 cve-icon
History

Fri, 06 Feb 2026 16:45:00 +0000

Type Values Removed Values Added
References

Thu, 05 Feb 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 04 Feb 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec authencesn assumes an ESP/ESN-formatted AAD. When assoclen is shorter than the minimum expected length, crypto_authenc_esn_decrypt() can advance past the end of the destination scatterlist and trigger a NULL pointer dereference in scatterwalk_map_and_copy(), leading to a kernel panic (DoS). Add a minimum AAD length check to fail fast on invalid inputs.
Title crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:37:58.639Z

Reserved: 2026-01-13T15:37:45.952Z

Link: CVE-2026-23060

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-02-04T17:16:16.687

Modified: 2026-02-06T17:16:22.510

Link: CVE-2026-23060

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-02-04T00:00:00Z

Links: CVE-2026-23060 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.