CVE-2026-31719

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: krb5enc - fix async decrypt skipping hash verification

krb5enc_dispatch_decrypt() sets req->base.complete as the skcipher

callback, which is the caller's own completion handler. When the

skcipher completes asynchronously, this signals "done" to the caller

without executing krb5enc_dispatch_decrypt_hash(), completely bypassing

the integrity verification (hash check).

Compare with the encrypt path which correctly uses

krb5enc_encrypt_done as an intermediate callback to chain into the

hash computation on async completion.

Fix by adding krb5enc_decrypt_done as an intermediate callback that

chains into krb5enc_dispatch_decrypt_hash() upon async skcipher

completion, matching the encrypt path's callback pattern.

Also fix EBUSY/EINPROGRESS handling throughout: remove

krb5enc_request_complete() which incorrectly swallowed EINPROGRESS

notifications that must be passed up to callers waiting on backlogged

requests, an

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References