CVE-2026-41514: OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses non-constant-time memcmp() for label hash verification and has multiple distinguishable error paths. This creates a Manger-style padding oracle that allows an attacker to recover RSA-OAEP plaintext with approximately 1000-2000 adaptive chosen ciphertext queries. Only affects plat-d06 with CFGHISILICONACCV3=y, which seems to be disabled by default. Version 4.11.0 contains a patch. As a workaround, disable Hisilicon HPRE RSA driver with CFGHISILICONACCV3=n.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.11.0 - Configuration
As a workaround, disable the Hisilicon HPRE RSA driver by setting CFG_HISILICON_ACC_V3=n (the issue affects plat-d06 when CFG_HISILICON_ACC_V3=y).
Hisilicon HPRE RSA driver CFG_HISILICON_ACC_V3 = n
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41514?
CVE-2026-41514 has a severity rating of low, with a score of 3.3.
What is the impact of CVE-2026-41514?
CVE-2026-41514 allows for plaintext recovery through an RSA-OAEP padding oracle.
How do I fix CVE-2026-41514?
To fix CVE-2026-41514, update the OP-TEE to a version within the range of 4.11.0 or later.
Which software is affected by CVE-2026-41514?
CVE-2026-41514 affects the OP-TEE and Trusted Firmware OP-TEE components.
What is the context of CVE-2026-41514?
CVE-2026-41514 relates to the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver in OP-TEE.