CVE-2022-49260

crypto: hisilicon/sec - fix the aead software fallback for engine

State: Published
Severity: 9.8 Critical
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/sec - fix the aead software fallback for engine

Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6c46a3297beae4ae2d22b26da5e091f058381c7c to before 40dba7c26e897c637e91312b35f664f1d4d0073cAffected 6c46a3297beae4ae2d22b26da5e091f058381c7c to before ef7b10f3cac7810ddcfd976304fd125aca33d144Affected 6c46a3297beae4ae2d22b26da5e091f058381c7c to before 5c1149e2abe0b7489300736b8277b45b113de67fAffected 6c46a3297beae4ae2d22b26da5e091f058381c7c to before 0a2a464f863187f97e96ebc6384c052cafd4a54cAffected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.*Not affected 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.