--- a/lib/crypto_backend/crypto_cipher_kernel.c

+++ b/lib/crypto_backend/crypto_cipher_kernel.c

@@ -31,6 +31,7 @@

 #ifdef ENABLE_AF_ALG

 #include <linux/if_alg.h>

+#include <sys/utsname.h>

 #ifndef AF_ALG

 #define AF_ALG 38

@@ -88,6 +89,35 @@ int crypt_cipher_blocksize(const char *n

 	return ca ? ca->blocksize : -EINVAL;

 }

+static size_t pagesize(size_t defsize)

+{

+	long r = sysconf(_SC_PAGESIZE);

+	return r < 0 ? defsize : (size_t)r;

+}

+

+static int check_rh_kernel_version(void)

+{

+	unsigned maj, mid, min, rel;

+	static struct utsname uts = {{ 0 }};

+	size_t ps = pagesize(32768);

+

+	if (ps < 32768)

+		return 0;

+

+	if (!*uts.release && uname(&uts) < 0)

+		return -ENOTSUP;

+	/*

+	 * RH kernels 3.10.0-185 and lower are affected by a crypto API kernel

+	 * socket bug. The bug only manifests on archs with page size >= 32 KiB.

+	 *

+	 * For reference, see rhbz#1136075

+	 */

+	if (sscanf(uts.release, "%u.%u.%u-%u", &maj, &mid, &min, &rel) == 4)

+		return (maj == 3 && mid == 10 && min == 0 && rel < 186) ? -ENOTSUP : 0;

+

+	return -ENOTSUP;

+}

+

 /*

  * ciphers

  *

@@ -104,6 +134,9 @@ int crypt_cipher_init(struct crypt_ciphe

 		.salg_type = "skcipher",

 	};

+	if (check_rh_kernel_version())

+		return -ENOTSUP;

+

 	h = malloc(sizeof(*h));

 	if (!h)

 		return -ENOMEM;