-

CVE-2026-93160

crypto: atmel-ecc - reject hardware ECDH without a public key

In the Linux kernel, the following vulnerability has been resolved:

crypto: atmel-ecc - reject hardware ECDH without a public key

The hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the
private key stored in the device. However, the public key is cached only
after atmel_ecdh_set_secret() successfully generated that private key
for the current tfm.

atmel_ecdh_generate_public_key() already rejects requests when no public
key is cached. Add the same check to atmel_ecdh_compute_shared_secret()
to prevent the device from using a private key that was not generated
for the current tfm.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < 5e33791dfcc6459e402a524669093cd953d5b2df
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < 33241f198287960bba5fc2251400896762650bfa
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < 3ea8b780d68f02fe235c5051ce8ac4b4940b9259
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < 6457162f74f45284ade2da644a4f0c54758ac0a6
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < 2b40bab362d2b598f34e5ccd4694cedc3c2553d4
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < e64d6f1aae8c837cb3f0446bf44108226d7370f4
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < add28e9988902d29ea93f4869280b4a16a049ea5
Status affected
Version 11105693fa05f499532b330da65c78ff93ed4440
Version < f240f9b588f4e2de89822adebf560a96b5d263ed
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.14
Status affected
Version 0
Version < 4.14
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5e33791dfcc6459e402a524669093cd953d5b2df
https://git.kernel.org/stable/c/33241f198287960bba5fc2251400896762650bfa
https://git.kernel.org/stable/c/3ea8b780d68f02fe235c5051ce8ac4b4940b9259
https://git.kernel.org/stable/c/6457162f74f45284ade2da644a4f0c54758ac0a6
https://git.kernel.org/stable/c/2b40bab362d2b598f34e5ccd4694cedc3c2553d4
https://git.kernel.org/stable/c/e64d6f1aae8c837cb3f0446bf44108226d7370f4
https://git.kernel.org/stable/c/add28e9988902d29ea93f4869280b4a16a049ea5
https://git.kernel.org/stable/c/f240f9b588f4e2de89822adebf560a96b5d263ed