Linux Distros Unpatched Vulnerability : CVE-2026-82390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4...

CVE-2026-82390

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

CVE-2026-82390

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

UBUNTU-CVE-2026-82390

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

CVE-2026-82390 Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

CVE-2026-82390

The Espressif AES driver (drivers/crypto/crypto_esp32_aes.c) contains a cross-session AES key confusion vulnerability. The driver provides a multi-session API, but the underlying hardware uses a single set of global registers for keys and modes. Because aes_begin_session() programs these register...

EUVD-2026-109976

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

Zephyr Project Zephyr race condition vulnerability

Versions Zephyr 4.3.0 through 4.4.2 contain a race condition vulnerability. This issue arises because within the AES driver, specifically in drivers/crypto/cryptoesp32aes.c, the aesbeginsession function executes code outside the aeslock mutex to write global keys and direction registers for the...

PT-2026-123421

The Espressif AES driver drivers/crypto/crypto esp32 aes.c advertises a multi-session cipher API — it hands out up to CONFIG ESP32 CRYPTO AES SESSIONS MAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and...

Linux snp_filter_reserved_mem_regions Heap Buffer Overflow DoS

The vulnerability of the snpfilterreservedmemregions function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux Setup SGIO Components Heap Buffer Overflow DoS

The vulnerability in the setupsgiocomponents function within the drivers/crypto/marvell/octeontx/otxcptvfreqmgr.c file of the Linux kernel is related to the use of a name with an incorrect reference. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the setupsgiocomponents function in the drivers/crypto/cavium/cpt/cptvfreqmanager.c kernel of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20261013-73-0485

The vulnerability of the hashdigestkey function in the drivers/crypto/caam/caamalgqi2.c file of the Linux kernel cryptographic accelerator driver is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261008-73-0038

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20261008-73-0036

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20261008-73-0034

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20261006-73-0122

The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261005-73-0152

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261005-73-0138

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261005-73-0143

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...