CVE-2026-93158

crypto: sa2ul - stop probe if context pool creation fails

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: sa2ul - stop probe if context pool creation fails

sa_ul_probe() calls sa_init_mem() to create the DMA pool used for security context buffers, but ignores its return value. If pool creation fails, probe still continues with DMA setup, algorithm registration and child population even though later request setup depends on that pool.

Stop probing when sa_init_mem() fails, and route that failure to the PM cleanup path without attempting to destroy an uncreated DMA pool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7694b6ca649fead1a57046935711bc82dfc78cfb to before 304dcd26bfc3ce6771c2bd3b7c0299dcfd5f4e06Affected 7694b6ca649fead1a57046935711bc82dfc78cfb to before 9907426b438e4dbc8c45138bd440ad6d732d80b7Affected 7694b6ca649fead1a57046935711bc82dfc78cfb to before 9a692a6a2b47328a36c8d80c7fbf81da16b6d6b1Affected 7694b6ca649fead1a57046935711bc82dfc78cfb to before 04c46784ec249cac995e31f0691397b82bdaa5fdAffected 7694b6ca649fead1a57046935711bc82dfc78cfb to before f72c7837614a9705f8b3021828d49c9f095803baAffected 7694b6ca649fead1a57046935711bc82dfc78cfb to before 91ded4742fcde6ad415c4d8a20e5ea0dcdf4f73eAffected 7694b6ca649fead1a57046935711bc82dfc78cfb to before b68b35ed97d3e18edb9dea500d88420a95006742Affected 7694b6ca649fead1a57046935711bc82dfc78cfb to before d03f980a25853f6a380895119a572a3bb1194e8dAffected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7694b6ca649fead1a57046935711bc82dfc78cfb to before 304dcd26bfc3ce6771c2bd3b7c0299dcfd5f4e06Affected
7694b6ca649fead1a57046935711bc82dfc78cfb to before 9907426b438e4dbc8c45138bd440ad6d732d80b7Affected
7694b6ca649fead1a57046935711bc82dfc78cfb to before 9a692a6a2b47328a36c8d80c7fbf81da16b6d6b1Affected
7694b6ca649fead1a57046935711bc82dfc78cfb to before 04c46784ec249cac995e31f0691397b82bdaa5fdAffected
7694b6ca649fead1a57046935711bc82dfc78cfb to before f72c7837614a9705f8b3021828d49c9f095803baAffected
7694b6ca649fead1a57046935711bc82dfc78cfb to before 91ded4742fcde6ad415c4d8a20e5ea0dcdf4f73eAffected
7694b6ca649fead1a57046935711bc82dfc78cfb to before b68b35ed97d3e18edb9dea500d88420a95006742Affected
7694b6ca649fead1a57046935711bc82dfc78cfb to before d03f980a25853f6a380895119a572a3bb1194e8dAffected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.