Executive brief
A vulnerability was identified in the Linux kernel's CryptoCell (ccree) driver, which provides hardware-accelerated cryptographic services. A memory leak occurs when certain cryptographic hashing operations fail, potentially allowing the system's memory to be exhausted over time. This could lead to system instability or a denial-of-service condition.
Technical details
A memory leak exists in the Linux kernel's CryptoCell (ccree) driver within the 'drivers/crypto/ccree/cc_hash.c' component. The vulnerability occurs in the 'cc_mac_digest()' function because it fails to call 'cc_unmap_result()' when 'cc_map_hash_request_final()' returns an error. This oversight leaves mapped resources or allocated memory orphaned during error handling. An attacker with the ability to trigger these specific cryptographic operations could potentially cause kernel memory exhaustion. The issue has been resolved by ensuring 'cc_unmap_result()' is called before returning -ENOMEM.
Affected products
- Linux Linux Kernel Fixed in 02c64052fad03699b9c6d1df2f9b444d17e4ac50 and related stable branches
Timeline
- 2026-03-30: other: Patch authored
- 2026-05-27: advisory: CVE published
References
- https://git.kernel.org/stable/c/02c64052fad03699b9c6d1df2f9b444d17e4ac50
- https://git.kernel.org/stable/c/22f1dd4ca3bfe77db52cc7df3cc353dc114aab8b
- https://git.kernel.org/stable/c/3061c9bfb3f5b3522ab174e2fa7473b24422d1c6
- https://git.kernel.org/stable/c/502440c235fe34cee02b24d7f893841f7565b3bc
- https://git.kernel.org/stable/c/910f335786a0a0f0b46c3c8c19a13d25cb4454b6