CVE-2026-87044

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

CVE-2026-87044 Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

CVE-2026-87044

The Mbed TLS crypto shim driver (located in drivers/crypto/crypto_mbedtls_shim.c) contains a memory leak vulnerability in the mbedtls_cbc() and mbedtls_aead() functions. When these functions encounter an error path after a successful setup of PSA multipart cipher or AEAD operations, they return d...