CVE-2026-93158: crypto: sa2ul - stop probe if context pool creation fails
In the Linux kernel, the following vulnerability has been resolved:
crypto: sa2ul - stop probe if context pool creation fails
saulprobe() calls sainitmem() to create the DMA pool used for security context buffers, but ignores its return value. If pool creation fails, probe still continues with DMA setup, algorithm registration and child population even though later request setup depends on that pool.
Stop probing when sainitmem() fails, and route that failure to the PM cleanup path without attempting to destroy an uncreated DMA pool.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel sa2ul crypto driver are exposed if creation of its DMA pool for security-context buffers fails during driver probe. The provided information does not identify affected kernel versions or specific hardware platforms.
What condition is required to trigger the problem?
The DMA context pool creation performed by sa_init_mem() must fail while sa_ul_probe() is running. The probe then incorrectly continues with DMA setup, algorithm registration, and child-device population despite the missing pool.
What happens after the failed pool creation?
Later crypto request setup depends on the missing DMA pool, so the driver may reach request handling in an invalid initialization state. The fix stops the probe and directs the error through PM cleanup without trying to destroy a pool that was never created.
How can I tell whether a system encountered this condition?
Check whether the sa2ul driver probe reported a failure creating its DMA pool but nevertheless proceeded to initialize DMA, register algorithms, or populate child devices. The supplied data does not provide specific log messages or detection commands.