CVE-2026-46033 | Linux Kernel up to 7.1-rc1 crypto crypto_authenc_esn_setauthsize out-of-bounds

A vulnerability described as critical has been identified in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3/7.1-rc1. This affects the function crypto_authenc_esn_setauthsize of the component crypto. Such manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-46033. The attack must be carried out from within the local network. There is no available exploit.

Upgrading the affected component is recommended.