Linux Kernel krb5enc Asynchronous Decryption Vulnerability Bypasses Hash Verification

A vulnerability in the Linux kernel's krb5enc cryptographic implementation allows asynchronous decryption to skip crucial hash verification, potentially compromising data integrity. This issue arises because the decryption process incorrectly signals completion before the integrity check is performed, unlike the encryption process, which properly sequences callbacks to ensure verification. The vulnerability affects the stable versions of the Linux kernel.

Impact

Exploitation of this vulnerability leads to the omission of integrity checks during asynchronous decryption, allowing for potential manipulation or corruption of data without detection.