Critical 9.8Published May 19, 2026

CVE-2026-43493crypto: pcrypt - Fix handling of MAY_BACKLOG requests

Updated under an hour ago (Oct 27, 2026, 8:10 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-390
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before ae7e95638d956d556d74b9abb9e780d3bd3dcd9e; 5a1436beec5744029f3ac90b6fe71a698dcd6155 builds before 1d7f07df450bac3301938fbc4251f2611be4084e; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 76641449b28979ebd6c02e9598367e119e385236; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 9f1cbca178c03188e201ed175251372149bb25f2; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before eb34e243df57e32f4c08fa191f3602ea19076276; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 77d55bc8675ee851ed639dc9be77325a8024cf67; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 46271895ddfb1ba41f89f7e0dffbe9c2bcf7380a; from 5a1436beec5744029f3ac90b6fe71a698dcd6155 before 915b692e6cb723aac658c25eb82c58fd81235110	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.34 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.86; from 6.13 before 6.18.27; from 6.19 before 7.0.4	NVD

References

References

https://git.kernel.org/stable/c/ae7e95638d956d556d74b9abb9e780d3bd3dcd9e	patch
https://git.kernel.org/stable/c/1d7f07df450bac3301938fbc4251f2611be4084e	patch
https://git.kernel.org/stable/c/76641449b28979ebd6c02e9598367e119e385236	patch
https://git.kernel.org/stable/c/9f1cbca178c03188e201ed175251372149bb25f2	patch
https://git.kernel.org/stable/c/eb34e243df57e32f4c08fa191f3602ea19076276	patch
https://git.kernel.org/stable/c/77d55bc8675ee851ed639dc9be77325a8024cf67	patch
https://git.kernel.org/stable/c/46271895ddfb1ba41f89f7e0dffbe9c2bcf7380a	patch
https://git.kernel.org/stable/c/915b692e6cb723aac658c25eb82c58fd81235110	patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.