CVE-2026-45854

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45854", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.079Z", "datePublished": "2026-05-27T12:15:28.988Z", "dateUpdated": "2026-05-27T12:15:28.988Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-27T12:15:28.988Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: inside-secure/eip93 - unregister only available algorithm\n\nEIP93 has an options register. This register indicates which crypto\nalgorithms are implemented in silicon. Supported algorithms are\nregistered on this basis. Unregister algorithms on the same basis.\nCurrently, all algorithms are unregistered, even those not supported\nby HW. This results in panic on platforms that don't have all options\nimplemented in silicon."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/inside-secure/eip93/eip93-main.c"], "versions": [{"version": "9739f5f93b7806a684713ba42e6ed2d1df7c8100", "lessThan": "243d642ff5809811208fa1707b7ab8a6ab4b1d68", "status": "affected", "versionType": "git"}, {"version": "9739f5f93b7806a684713ba42e6ed2d1df7c8100", "lessThan": "4c1c5a1d720fdacea060e106c7dd79417243d121", "status": "affected", "versionType": "git"}, {"version": "9739f5f93b7806a684713ba42e6ed2d1df7c8100", "lessThan": "0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/inside-secure/eip93/eip93-main.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.14", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.4", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.19.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/243d642ff5809811208fa1707b7ab8a6ab4b1d68"}, {"url": "https://git.kernel.org/stable/c/4c1c5a1d720fdacea060e106c7dd79417243d121"}, {"url": "https://git.kernel.org/stable/c/0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f"}], "title": "crypto: inside-secure/eip93 - unregister only available algorithm", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/crypto/inside-secure/eip93/eip93-main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "243d642ff5809811208fa1707b7ab8a6ab4b1d68", "status": "affected", "version": "9739f5f93b7806a684713ba42e6ed2d1df7c8100", "versionType": "git"}, {"lessThan": "4c1c5a1d720fdacea060e106c7dd79417243d121", "status": "affected", "version": "9739f5f93b7806a684713ba42e6ed2d1df7c8100", "versionType": "git"}, {"lessThan": "0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f", "status": "affected", "version": "9739f5f93b7806a684713ba42e6ed2d1df7c8100", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/crypto/inside-secure/eip93/eip93-main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"lessThan": "6.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.14", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4CC7C285-4CAC-4ED0-BEF1-D65CD5BA4AD1", "versionEndExcluding": "6.18.14", "versionStartIncluding": "6.15", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "672A3E79-EC03-479D-8503-361DFBDC8092", "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: inside-secure/eip93 - unregister only available algorithm\n\nEIP93 has an options register. This register indicates which crypto\nalgorithms are implemented in silicon. Supported algorithms are\nregistered on this basis. Unregister algorithms on the same basis.\nCurrently, all algorithms are unregistered, even those not supported\nby HW. This results in panic on platforms that don't have all options\nimplemented in silicon."}], "id": "CVE-2026-45854", "lastModified": "2026-06-25T21:08:07.807", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-27T14:16:57.437", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/243d642ff5809811208fa1707b7ab8a6ab4b1d68"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4c1c5a1d720fdacea060e106c7dd79417243d121"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: crypto: inside-secure/eip93 - unregister only available algorithm", "id": "2482149", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482149"}, "csaw": false, "cwe": "CWE-832", "details": ["A flaw was found in the Linux kernel's EIP93 cryptographic accelerator driver. This vulnerability occurs because the driver attempts to unregister all cryptographic algorithms, even those not supported by the hardware. This incorrect handling can lead to a system panic, effectively causing a Denial of Service (DoS) on platforms where not all EIP93 options are implemented in silicon."], "name": "CVE-2026-45854", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-45854\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-45854\nhttps://lore.kernel.org/linux-cve-announce/2026052709-CVE-2026-45854-1df1@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[9739f5f93b7806a684713ba42e6ed2d1df7c8100,243d642ff5809811208fa1707b7ab8a6ab4b1d68)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[9739f5f93b7806a684713ba42e6ed2d1df7c8100,4c1c5a1d720fdacea060e106c7dd79417243d121)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[9739f5f93b7806a684713ba42e6ed2d1df7c8100,0ceeadc7b53a041d89d5843f6bf0ccb7c98b0b4f)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.14,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.4,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-27T15:45:37.268585+00:00", "updated": "2026-08-13T23:45:16.804176+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}