{"apiVersion":"1.0","identifier":"CVE-2026-99037","description":"In the Linux kernel, the following vulnerability has been resolved: dm-crypt: reject the lmk IV mode with AEAD ciphers A -capi:- table line that pairs an AEAD cipher with the lmk IV mode, for example -capi:gcm(aes)-lmk- with the integrity:28:aead option, causes an oops when it is loaded. lmk sets tfms_count to 64, but crypt_alloc_tfms_aead only allocates one transform, so crypt_setkey reads past the end of the tfms_aead array and calls crypto_aead_setkey on the values it finds there. lmk exists for compatibility with Loop-AES, which uses CBC, so refuse it with an AEAD cipher rather than allocate 64 AEAD transforms. The check cannot go in crypt_iv_lmk_ctr with the other lmk checks, because the IV constructor runs after crypt_set_key. Note that this is not a security bug because the memory corruption can only be triggered by root.","publishedAt":"2026-10-23T13:17:26","lastModifiedAt":"2026-10-30T13:21:40","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-99037","cvssScore":null,"cvssVector":null,"epssProbability":0.00177,"riskScore":null,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-99037","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-99037","en":"https://www.redsauce.net/en/cves/CVE-2026-99037","fr":"https://www.redsauce.net/fr/cves/CVE-2026-99037","pt":"https://www.redsauce.net/pt/cves/CVE-2026-99037","de":"https://www.redsauce.net/de/cves/CVE-2026-99037","sk":"https://www.redsauce.net/sk/cves/CVE-2026-99037","el":"https://www.redsauce.net/el/cves/CVE-2026-99037"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-99037"}}