[LTS 9.2] CVE-2026-23060, CVE-2026-31431, CVE-2026-31677 #1167

Merged

roxanan1996 merged 10 commits into

{jmaple}_ciqlts9_2

May 1, 2026

Commits on Apr 30, 2026

crypto: af-alg - fix NULL pointer dereference in scatterwalk

Herbert Xu
authored and
PlaidCat
committed
crypto: algif_aead - Revert to operating out-of-place

Herbert Xu
authored and
PlaidCat
committed
crypto: af_alg - limit RX SG extraction by receive buffer budget

Herbert Xu
authored and
PlaidCat
committed
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

Herbert Xu
authored and
PlaidCat
committed
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

Herbert Xu
authored and
PlaidCat
committed
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

Herbert Xu
authored and
PlaidCat
committed
crypto: authencesn - Fix src offset when decrypting in-place

Herbert Xu
authored and
PlaidCat
committed
crypto: authencesn - reject short ahash digests during instance creation

Herbert Xu
authored and
PlaidCat
committed
crypto: algif_aead - Fix minimum RX size check for decryption
PlaidCat
committed
crypto: algif_aead - snapshot IV for async AEAD requests

Herbert Xu
authored and
PlaidCat
committed