CVE-2026-46077

crypto: atmel-tdes - fix DMA sync direction

State: Published
Severity: Not scored
Published: May 27, 2026
Updated: Jun 14, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: atmel-tdes - fix DMA sync direction

Before DMA output is consumed by the CPU, ->dma_addr_out must be synced with dma_sync_single_for_cpu() instead of dma_sync_single_for_device(). Using the wrong direction can return stale cache data on non-coherent platforms.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	13802005d8f2db244ec1f5d7f6923de8f7a463db to before ce3224678acb8c0b3473daa7d7dbffc998c6951aAffected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before b9b28f3881dd514e74f98ae04e79a635022a4804Affected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before c0f3002c02a3a83250e25582ffbe8df7eb78a8bdAffected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before 5281e6e2302362f6b75b70cbfe4098d2a25dafd9Affected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before 12a0adfe498cd5d87e6365d7ca5f6b3eed79e523Affected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before 863d11b3927703ad95077c81a8a6489c5c7872f7Affected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before b5f5df801d161ba244f391519cbff2f4e5c6edc2Affected 13802005d8f2db244ec1f5d7f6923de8f7a463db to before c8a9a647532f5c2a04180352693215e24e9dba03Affected
LinuxLinux	3.6Affected before 3.6Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.86 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

13802005d8f2db244ec1f5d7f6923de8f7a463db to before ce3224678acb8c0b3473daa7d7dbffc998c6951aAffected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before b9b28f3881dd514e74f98ae04e79a635022a4804Affected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before c0f3002c02a3a83250e25582ffbe8df7eb78a8bdAffected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before 5281e6e2302362f6b75b70cbfe4098d2a25dafd9Affected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before 12a0adfe498cd5d87e6365d7ca5f6b3eed79e523Affected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before 863d11b3927703ad95077c81a8a6489c5c7872f7Affected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before b5f5df801d161ba244f391519cbff2f4e5c6edc2Affected
13802005d8f2db244ec1f5d7f6923de8f7a463db to before c8a9a647532f5c2a04180352693215e24e9dba03Affected

LinuxLinux

3.6Affected
before 3.6Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.86 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.