CVE-2026-93155 PUBLISHED

crypto: keembay - Fix AEAD unregister count in error path

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

crypto: keembay - Fix AEAD unregister count in error path

register_aes_algs() registers the AEAD algorithms before registering the skcipher algorithms. If skcipher registration fails, the function unwinds the earlier AEAD registration with crypto_engine_unregister_aeads(), but it passes ARRAY_SIZE(algs), which is the skcipher table size.

Use ARRAY_SIZE(algs_aead) for the AEAD unwind path so the unregister helper iterates over the same table that was registered. Also clarify the nearby comment: the crypto registration helpers clean up algorithms registered within the same call, while this function must still unwind earlier successful registration steps.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 88574332451380f4b51f6ca88ab9810e714bfb9b to 27ec91c29ee155cc507b2f56221fc6fab65dbb51 (excl.)
  • affected from 88574332451380f4b51f6ca88ab9810e714bfb9b to 5607b101d86cbee8dd1ffab784495c880ca73383 (excl.)
  • affected from 88574332451380f4b51f6ca88ab9810e714bfb9b to 5bbb726d27ff6dff750264e51aa665538394d0f8 (excl.)
  • affected from 88574332451380f4b51f6ca88ab9810e714bfb9b to a3217fe7998622728a53dff405615e0971949eaf (excl.)
  • affected from 88574332451380f4b51f6ca88ab9810e714bfb9b to e264401ce4776a288524e5b87593d4d864147115 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.11 is affected
  • unaffected from 0 to 5.11 (excl.)
  • unaffected from 6.6.157 to 6.6.* (incl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References