CVE-2026-45854: crypto: inside-secure/eip93 - unregister only available algorithm
In the Linux kernel, the following vulnerability has been resolved:
crypto: inside-secure/eip93 - unregister only available algorithm
EIP93 has an options register. This register indicates which crypto algorithms are implemented in silicon. Supported algorithms are registered on this basis. Unregister algorithms on the same basis. Currently, all algorithms are unregistered, even those not supported by HW. This results in panic on platforms that don't have all options implemented in silicon.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45854?
CVE-2026-45854 has a medium severity rating of 5.5 based on the CVSS 3.1 scoring system.
How do I fix CVE-2026-45854?
To mitigate CVE-2026-45854, update your Linux kernel to the latest patched version provided by The Linux Foundation.
What type of vulnerabilities does CVE-2026-45854 address?
CVE-2026-45854 addresses a vulnerability related to the unregistering of a crypto algorithm in the Linux kernel.
What systems are affected by CVE-2026-45854?
CVE-2026-45854 affects systems running vulnerable versions of the Linux kernel that utilize the inside-secure/eip93 crypto implementation.
Is CVE-2026-45854 an important vulnerability to address?
Yes, CVE-2026-45854 should be addressed due to its potential impact on cryptographic operations within affected Linux systems.