CVE-2026-93156

A flaw was found in the Linux kernel's rk3288 crypto driver. The rkhashrun function fails to properly handle a HASH idle timeout, ignoring the poll result. This can lead to the driver finalizing a cryptographic request with a previous success value, even if the hash engine is not idle...

CVE-2026-97506

A flaw was found in the Linux kernel's Intel IXP4xx crypto driver. When memory allocation fails while constructing buffer descriptor chains for cryptographic operations, the driver attempts to access an invalid null pointer. A local user could exploit this flaw under low-memory conditions to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a – Fixed the OOM -tfmcount leak. If memory allocation fails, the -tfmcount value is decremented to prevent future reads from being blocked due to lack of memory...

Linux Distros Unpatched Vulnerability : CVE-2026-80945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes...

CVE-2026-80922

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-80922

CVE-2026-80922 affects the Linux kernel component crypto: qcom-rng (Qualcomm RNG driver). The root cause is that the driver incorrectly rejected zero as an invalid random number, even though zero is a legitimate random value. This rejection makes the RNG output distinguishable from true randomnes...

CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

Linux kernel cryptographic accelerator Module Heap Buffer Overflow DoS

The vulnerability of the atmelsha204aremove function in the drivers/crypto/atmel-sha204a.c driver for the Linux kernel cryptographic accelerator is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

AZL-99402 CVE-2026-80831 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

CVE-2026-80831

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80831 crypto: mxs-dcp - fix source scatterlist length access

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

CVE-2026-80831

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

Linux Distros Unpatched Vulnerability : CVE-2026-80831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore,...

Linux Distros Unpatched Vulnerability : CVE-2026-80833

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG,...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...

SUSE CVE-2026-74402

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were failing to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only fetch the ...

CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...