CVE-2026-93155
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: keembay - Fix AEAD unregister count in error path
register_aes_algs() registers the AEAD algorithms before registering the skcipher algorithms. If skcipher registration fails, the function unwinds the earlier AEAD registration with crypto_engine_unregister_aeads(), but it passes ARRAY_SIZE(algs), which is the skcipher table size.
Use ARRAY_SIZE(algs_aead) for the AEAD unwind path so the unregister helper iterates over the same table that was registered. Also clarify the nearby comment: the crypto registration helpers clean up algorithms registered within the same call, while this function must still unwind earlier successful registration steps.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 5.11.0, < 6.1.191+ 1 more
- (no CPE)range: >= 5.11.0, < 6.1.191
- (no CPE)range: < 7.2.8-1.1
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/27ec91c29ee155cc507b2f56221fc6fab65dbb51nvd
- git.kernel.org/stable/c/5607b101d86cbee8dd1ffab784495c880ca73383nvd
- git.kernel.org/stable/c/5bbb726d27ff6dff750264e51aa665538394d0f8nvd
- git.kernel.org/stable/c/a3217fe7998622728a53dff405615e0971949eafnvd
- git.kernel.org/stable/c/ccfaccc35e5a911ec1748291ea505e03b1ac03d9nvd
- git.kernel.org/stable/c/e264401ce4776a288524e5b87593d4d864147115nvd
News mentions
0No linked articles in our index yet.