High 7.8Published May 1, 2026

CVE-2026-43033crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

Updated under an hour ago (Oct 26, 2026, 10:40 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When decrypting data that is not in-place (src != dst), there is no need to save the high-order sequence bits in dst as it could simply be re-copied from the source. However, the data to be hashed need to be rearranged accordingly. Thanks,

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-682
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	104880a6b470958ddc30e139c41aa4f6ed3a5234 builds before 8c62f618576519dbed6816fafc623ce592953025; from 104880a6b470958ddc30e139c41aa4f6ed3a5234 before d589abd8b019b07075fda255ceab8c8e950cdb3f; 104880a6b470958ddc30e139c41aa4f6ed3a5234 builds before 5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5; from 104880a6b470958ddc30e139c41aa4f6ed3a5234 before d0c4ff6812386880f30bc64c2921299cc4d7b47f; 104880a6b470958ddc30e139c41aa4f6ed3a5234 builds before 89fe118b6470119b20c04afc36e45b81a69ea11f; 104880a6b470958ddc30e139c41aa4f6ed3a5234 builds before 153d5520c3f9fd62e71c7e7f9e34b59cf411e555; from 104880a6b470958ddc30e139c41aa4f6ed3a5234 before cded4002d22177e8deaca1f257ecd932c9582b6b; from 104880a6b470958ddc30e139c41aa4f6ed3a5234 before e02494114ebf7c8b42777c6cd6982f113bfdbec7	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.3 before 5.10.254; from 5.11 before 5.15.204; from 5.16 before 6.1.170; from 6.2 before 6.6.137; from 6.7 before 6.12.85; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; and 5 more ranges	NVD

References

References

https://git.kernel.org/stable/c/8c62f618576519dbed6816fafc623ce592953025	patch
https://git.kernel.org/stable/c/d589abd8b019b07075fda255ceab8c8e950cdb3f	patch
https://git.kernel.org/stable/c/5466e7d0cd9e4f9cef9d8f18f18b60e7bc1c77e5	patch
https://git.kernel.org/stable/c/d0c4ff6812386880f30bc64c2921299cc4d7b47f	patch
https://git.kernel.org/stable/c/89fe118b6470119b20c04afc36e45b81a69ea11f	patch
https://git.kernel.org/stable/c/153d5520c3f9fd62e71c7e7f9e34b59cf411e555	patch
https://git.kernel.org/stable/c/cded4002d22177e8deaca1f257ecd932c9582b6b	patch
https://git.kernel.org/stable/c/e02494114ebf7c8b42777c6cd6982f113bfdbec7	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.