CVE-2026-45854

Description

A flaw was found in the Linux kernel's EIP93 cryptographic accelerator driver. This vulnerability occurs because the driver attempts to unregister all cryptographic algorithms, even those not supported by the hardware. This incorrect handling can lead to a system panic, effectively causing a Denial of Service (DoS) on platforms where not all EIP93 options are implemented in silicon.

Understanding the Weakness (CWE)

Integrity,Confidentiality,Availability,Other

Technical Impact: DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands; Modify Memory; Other

Depending on the locking functionality, an unlock of a non-locked resource might corrupt the state of the product, possibly including denial of service, memory corruption, or other modification to the resource (or its associated metadata that is used for tracking locks). In some cases, an unlock operation might not have any adverse effects.

Frequently Asked Questions

Want to get errata notifications? Sign up here.