CVE-2026-93155

crypto: keembay - Fix AEAD unregister count in error path

N/A
Published: September 17, 2026 at 04:11 PM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Fix AEAD unregister count in error path register_aes_algs() registers the AEAD algorithms before registering the skcipher algorithms. If skcipher registration fails, the function unwinds the earlier AEAD registration with crypto_engine_unregister_aeads(), but it passes ARRAY_SIZE(algs), which is the skcipher table size. Use ARRAY_SIZE(algs_aead) for the AEAD unwind path so the unregister helper iterates over the same table that was registered. Also clarify the nearby comment: the crypto registration helpers clean up algorithms registered within the same call, while this function must still unwind earlier successful registration steps.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.1188574332451380f4b51f6ca88ab9810e714bfb9b
Vendor states this is fixed in 27ec91c29ee155cc507b2f56221fc6fab65dbb51 (fixed)
Vendor states this is fixed in 5607b101d86cbee8dd1ffab784495c880ca73383 (fixed)
Vendor states this is fixed in 5bbb726d27ff6dff750264e51aa665538394d0f8 (fixed)
Vendor states this is fixed in a3217fe7998622728a53dff405615e0971949eaf (fixed)
Vendor states this is fixed in e264401ce4776a288524e5b87593d4d864147115 (fixed)
Vendor states this is fixed in 5.11 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card