The Linux kernel contained a vulnerability in the crypto af_alg module where the associated data length for AEAD (Authenticated Encryption with Associated Data) operations was not properly capped. This could cause arithmetic overflow during TX buffer size checks. The fix involved limiting the AD length to 0x80000000, preventing overflow conditions that could potentially lead to memory corruption or other unintended behavior.

The vulnerability could allow an attacker to trigger arithmetic overflow in the kernel's crypto subsystem, potentially leading to memory corruption or denial of service. However, no known exploits are reported in the wild, and the exact impact beyond overflow prevention is not detailed in the available data.

A fix has been implemented in the Linux kernel to cap the AEAD associated data length to 0x80000000, preventing arithmetic overflow. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the specific patch and remediation guidance.