Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-26T00:00:00 kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-787

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way it is done in tegra_ccm_crypt_init(). The current formulae may lead to a crash if a caller does not call tegra_gcm_setauthsize() and so ctx->authsize remains zero. Then a decrypt operation with incorrect rctx->cryptlen will lead to a write beyound rctx->dst_sg buffer. As a follow-up cleanup delete struct tegra_aead_ctx->authsize field since it appears to be completely unused. Also simplify tegra_ccm_setauthsize() and tegra_gcm_setauthsize() functions respectively.

A flaw was found in the Linux kernel's Tegra cryptography module. An incorrect calculation in the 'tegra_gcm_do_one_req()' function, specifically when handling the 'cryptlen' parameter, can occur if a caller does not properly initialize the authentication size. This can lead to a write beyond the intended memory buffer during a decrypt operation, potentially causing a system crash (Denial of Service).

To prevent the `tegra_se_aes` crypto module from being loaded, blacklist it by creating a configuration file. Create `/etc/modprobe.d/blacklist-tegra.conf` with the content: ``` blacklist tegra_se_aes ``` Then, regenerate the initramfs and reboot the system for the changes to take effect: ```bash dracut -f -v $(uname -r) reboot ``` This action may affect system functionality if NVIDIA Tegra hardware and its cryptographic features are actively utilized. Red Hat Enterprise Linux 10 Affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Affected kernel Red Hat Enterprise Linux 9 Affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-80522 https://nvd.nist.gov/vuln/detail/CVE-2026-80522 https://lore.kernel.org/linux-cve-announce/2026082601-CVE-2026-80522-a340@gregkh/T