SB20261022421 - Reusing a Nonce, Key Pair in Encryption in Linux kernel tipc

Description

This security bulletin contains information about 1 vulnerability.

1) Reusing a Nonce, Key Pair in Encryption (CVE-ID: CVE-2026-98805)

CWE-ID: CWE-323 - Reusing a Nonce, Key Pair in Encryption

CVSSv4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise the confidentiality of encrypted TIPC traffic and forge authenticated packets.

The vulnerability exists due to reuse of AES-GCM nonces in the Linux kernel TIPC encryption implementation when a peer reports a receive-key change and the per-peer counter resets while the sender retains the same transmit key and salt. A remote attacker can analyze captured packets with reused nonces to compromise traffic confidentiality, recover the GCM authentication key, and generate valid authentication tags for modified ciphertexts.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/512ccd3d0e91e791fb37442aa0a2599aca19783d
• https://git.kernel.org/stable/c/5c8ce13c792e28d56f9ec3cd6728d8225bc0e3a2
• https://git.kernel.org/stable/c/60e0c2aeaa605ff19ca4e65126a35643d4d7ee1c
• https://git.kernel.org/stable/c/a85a3dce4b6c73ddaa1e9725b906249744bf7cf2
• https://git.kernel.org/stable/c/f74f100e49588c1dbdc6ab3ba9e2c67b36d015d0