CVE-2015-3331: The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19...

Security readout for executives and security teams

CVE-2015-3331 is a Linux kernel memory handling flaw in the AES-NI RFC4106 decryption path. On affected kernels, a crafted or unusual crypto API call can crash the system and may allow arbitrary code execution. The public data does not show active exploitation. Exposure is most likely on Linux systems running vulnerable, unpatched kernels with the AES-NI RFC4106 crypto path available. Kernel version alone may mislead because distributions backport fixes, so validate installed vendor kernel packages against advisories. Treat this as a high-priority kernel patching issue, especially for shared Linux infrastructure. There is no source-backed active exploitation claim, but system crash and possible kernel-level code execution justify timely remediation. Mitigation focus: Apply the relevant vendor kernel security update for each Linux distribution.; Reboot systems after kernel updates so the fixed kernel is active.; Check Linux 3.19.3 or vendor backport status before declaring remediation complete..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.