CVE-2026-80565: crypto: qce - fix error path in devm_qce_register_algs
Published Aug 26, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
crypto: qce - fix error path in devmqceregisteralgs
If ops->registeralgs() fails, the error path repeatedly calls the same ops->unregisteralgs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 26, 2026
CVE Published
via MITRE·02:37 PM
Data Sourced
via MITRE·02:37 PM
Description
Data Sourced
via NVD·03:17 PM
Description
Frequently Asked Questions
1
What condition triggers the faulty cleanup path?
The issue is triggered when ops->register_algs() fails during devm_qce_register_algs(). The cleanup path then repeatedly invokes the unregister operation associated with the failed registration rather than unregistering algorithms that were registered earlier.
2
What is the remediation?
Apply a Linux kernel update containing the fix. The corrected error path uses the loop index to unregister the previously registered algorithms instead.