-

CVE-2026-93155

crypto: keembay - Fix AEAD unregister count in error path

In the Linux kernel, the following vulnerability has been resolved:

crypto: keembay - Fix AEAD unregister count in error path

register_aes_algs() registers the AEAD algorithms before registering the
skcipher algorithms.  If skcipher registration fails, the function unwinds
the earlier AEAD registration with crypto_engine_unregister_aeads(), but it
passes ARRAY_SIZE(algs), which is the skcipher table size.

Use ARRAY_SIZE(algs_aead) for the AEAD unwind path so the unregister helper
iterates over the same table that was registered.  Also clarify the nearby
comment: the crypto registration helpers clean up algorithms registered
within the same call, while this function must still unwind earlier
successful registration steps.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 88574332451380f4b51f6ca88ab9810e714bfb9b
Version < 27ec91c29ee155cc507b2f56221fc6fab65dbb51
Status affected
Version 88574332451380f4b51f6ca88ab9810e714bfb9b
Version < 5607b101d86cbee8dd1ffab784495c880ca73383
Status affected
Version 88574332451380f4b51f6ca88ab9810e714bfb9b
Version < 5bbb726d27ff6dff750264e51aa665538394d0f8
Status affected
Version 88574332451380f4b51f6ca88ab9810e714bfb9b
Version < a3217fe7998622728a53dff405615e0971949eaf
Status affected
Version 88574332451380f4b51f6ca88ab9810e714bfb9b
Version < e264401ce4776a288524e5b87593d4d864147115
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.11
Status affected
Version 0
Version < 5.11
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.102
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/27ec91c29ee155cc507b2f56221fc6fab65dbb51
https://git.kernel.org/stable/c/5607b101d86cbee8dd1ffab784495c880ca73383
https://git.kernel.org/stable/c/5bbb726d27ff6dff750264e51aa665538394d0f8
https://git.kernel.org/stable/c/a3217fe7998622728a53dff405615e0971949eaf
https://git.kernel.org/stable/c/e264401ce4776a288524e5b87593d4d864147115