CyberICT

CVE-2026-31677

Microsoft · Published April 26, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

crypto: af_alg - limit RX SG extraction by receive buffer budget. crypto: af_alg - limit RX SG extraction by receive buffer budget

Affected Products

  • azl3 kernel 6.6.138.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.143.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.145.2-1 on Azure Linux 3.0
  • azl3 kernel 6.6.130.1-3 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H