NVD

CVE-2026-53016 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

Nist CVSS score does not match with CNA score

CNA: kernel.org

Base Score: 7.8 HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ADP: redhat-SADP

Base Score: 7.0 HIGH

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://access.redhat.com/errata/RHSA-2026:38491	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:39494	redhat-SADP	Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-53016	redhat-SADP	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492269	redhat-SADP	Third Party Advisory
https://git.kernel.org/stable/c/227c1e1d9e2aa4cfc65ba446d5690da1f546cda4	kernel.org	Patch
https://git.kernel.org/stable/c/798d409a8949f3f495f238549b86de2886b129bd	kernel.org	Patch
https://git.kernel.org/stable/c/939061b2d0f7f15114e34b4ce878ef50ff4089c3	kernel.org	Patch
https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4	kernel.org	Patch
https://git.kernel.org/stable/c/bb01d8f1f385bc9034ca114d3508c7fdea24fc9a	kernel.org	Patch
https://git.kernel.org/stable/c/df9784bb5b637ac80f4a2768a58ca9a50bef28a9	kernel.org	Patch
https://git.kernel.org/stable/c/dfb2cf434829819268fe50f41542aad318ad62b2	kernel.org	Patch
https://git.kernel.org/stable/c/eecee15e263ccb8cd77170a56ab6c969cb54dd6a	kernel.org	Patch
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53016.json	redhat-SADP	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	NIST
CWE-805	Buffer Access with Incorrect Length Value	redhat-SADP

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

6 change records found show changes

Initial Analysis by NIST 7/15/2026 9:55:21 AM

Action	Type	New Value
Added	CWE	CWE-787
Added	CPE Configuration	OR cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.2 up to (excluding) 6.6.141 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.7 up to (excluding) 6.12.91 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.13 up to (excluding) 6.18.33 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.19 up to (excluding) 7.0.10 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.16 up to (excluding) 6.1.175 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.11 up to (excluding) 5.15.209 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 3.14 up to (excluding) 5.10.258
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/227c1e1d9e2aa4cfc65ba446d5690da1f546cda4 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/798d409a8949f3f495f238549b86de2886b129bd Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/939061b2d0f7f15114e34b4ce878ef50ff4089c3 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/bb01d8f1f385bc9034ca114d3508c7fdea24fc9a Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/df9784bb5b637ac80f4a2768a58ca9a50bef28a9 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/dfb2cf434829819268fe50f41542aad318ad62b2 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/eecee15e263ccb8cd77170a56ab6c969cb54dd6a Types: Patch
Added	Reference Type	redhat-SADP: https://access.redhat.com/errata/RHSA-2026:38491 Types: Third Party Advisory
Added	Reference Type	redhat-SADP: https://access.redhat.com/errata/RHSA-2026:39494 Types: Third Party Advisory
Added	Reference Type	redhat-SADP: https://access.redhat.com/security/cve/CVE-2026-53016 Types: Third Party Advisory
Added	Reference Type	redhat-SADP: https://bugzilla.redhat.com/show_bug.cgi?id=2492269 Types: Third Party Advisory
Added	Reference Type	redhat-SADP: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53016.json Types: Third Party Advisory

CVE Modified by redhat-SADP 7/14/2026 9:16:27 PM

Action

Type

Old Value

New Value

Added

Reference

https://access.redhat.com/errata/RHSA-2026:39494

Changed

Affected

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux BaseOS (v. 9)","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::crb"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Real Time for NFV (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::nfv"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Real Time (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:7"]}]

Record truncated, showing 2048 of 2136 characters.
View Entire Change Record

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"versions":[{"version":"0:6.12.0-211.34.1.el10_2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/a:redhat:enterprise_linux:9","cpe:/o:redhat:enterprise_linux:9"],"versions":[{"version":"0:5.14.0-687.25.1.el9_8","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/p

CVE Modified by redhat-SADP 7/14/2026 8:17:12 AM

Action

Type

Old Value

New Value

Added

Reference

https://access.redhat.com/errata/RHSA-2026:38491

Changed

Affected

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:7"]}]

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux BaseOS (v. 9)","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::crb"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Real Time for NFV (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::nfv"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Real Time (v. 9)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::realtime"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:7"]}]

CVE Modified by redhat-SADP 6/29/2026 11:20:53 PM

Action	Type	New Value
Added	CVSS V3.1	AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Added	CWE	CWE-805
Added	Reference	https://access.redhat.com/security/cve/CVE-2026-53016
Added	Reference	https://bugzilla.redhat.com/show_bug.cgi?id=2492269
Added	Reference	https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53016.json
Added	Affected	[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:7"]}]

New CVE Received from kernel.org 6/24/2026 1:17:12 PM

Action	Type	New Value
Added	Description	In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.
Added	Reference	https://git.kernel.org/stable/c/227c1e1d9e2aa4cfc65ba446d5690da1f546cda4
Added	Reference	https://git.kernel.org/stable/c/798d409a8949f3f495f238549b86de2886b129bd
Added	Reference	https://git.kernel.org/stable/c/939061b2d0f7f15114e34b4ce878ef50ff4089c3
Added	Reference	https://git.kernel.org/stable/c/a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4
Added	Reference	https://git.kernel.org/stable/c/bb01d8f1f385bc9034ca114d3508c7fdea24fc9a
Added	Reference	https://git.kernel.org/stable/c/df9784bb5b637ac80f4a2768a58ca9a50bef28a9
Added	Reference	https://git.kernel.org/stable/c/dfb2cf434829819268fe50f41542aad318ad62b2
Added	Reference	https://git.kernel.org/stable/c/eecee15e263ccb8cd77170a56ab6c969cb54dd6a
Added	Affected	Record truncated, showing 2048 of 2483 characters. View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/crypto/ccp/ccp-crypto-aes.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"939061b2d0f7f15114e34b4ce878ef50ff4089c3","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"798d409a8949f3f495f238549b86de2886b129bd","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"dfb2cf434829819268fe50f41542aad318ad62b2","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"eecee15e263ccb8cd77170a56ab6c969cb54dd6a","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"bb01d8f1f385bc9034ca114d3508c7fdea24fc9a","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"df9784bb5b637ac80f4a2768a58ca9a50bef28a9","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"227c1e1d9e2aa4cfc65ba446d5690da1f546cda4","versionType":"git","status":"affected"},{"version":"2b789435d7f36ed918d92db647f3a2f3fec9bb1f","lessThan":"a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/crypto/ccp/ccp-crypto-aes.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.14","status":"affected"},{"version":"0","lessThan":"3.14","versionType":"semver","status":"unaffected"},{"version":"5.10.258","lessThanOrEqual":"5.10.","versionType":"semver","status":"unaffected"},{"version":"5.15.209","lessThanOrEqual":"5.15.","versionType":"semver","status":"unaffected"},{"version":"6.1.175","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.141","lessThanOrEqual":"6.

Quick Info

CVE Dictionary Entry:
CVE-2026-53016
NVD Published Date:
06/24/2026
NVD Last Modified:
07/15/2026
Source:
kernel.org

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2026-53016 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

Initial Analysis by NIST 7/15/2026 9:55:21 AM

CVE Modified by redhat-SADP 7/14/2026 9:16:27 PM

CVE Modified by redhat-SADP 7/14/2026 8:17:12 AM

CVE Modified by redhat-SADP 6/29/2026 11:20:53 PM

CVE Modified by kernel.org 6/28/2026 4:16:29 AM

New CVE Received from kernel.org 6/24/2026 1:17:12 PM

Quick Info