The Linux kernel introduced a change in the crypto API by adding the cra_reqsize field to the crypto_alg structure to replace type-specific reqsize fields, initially targeting ahash and acomp algorithms. However, this change was recommended for all crypto algorithms, including skcipher. The skcipher framework did not update its initialization to properly set reqsize from cra_reqsize, causing memory corruption and crashes. The fix involves adding proper set_reqsize calls in the skcipher initialization function to correctly initialize the reqsize for these algorithms.

Exploitation of this vulnerability can lead to memory corruption and crashes within the Linux kernel's cryptographic skcipher subsystem, potentially impacting system confidentiality, integrity, and availability. The CVSS vector indicates local attack complexity with low privileges required and no user interaction, emphasizing the risk of high impact on affected systems.

A fix has been implemented in the Linux kernel to properly initialize the reqsize field in skcipher algorithms by adding the necessary set_reqsize calls during initialization. Users and administrators should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the latest remediation guidance.