HIGH
qce Algorithm Registration DoS
CVE-2026-80565
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
KernelScan AI4.2MEDIUM
01Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedly calls the same ops->unregister_algs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.
02KernelScan AI Analysis
Risk summary
A logic error in the Qualcomm crypto engine driver's algorithm registration error path can leave cryptographic algorithms leaked and may crash the kernel when the driver fails to fully initialize.
Vulnerability analysis
When the Qualcomm crypto engine driver fails partway through registering its cryptographic algorithms, the cleanup loop mistakenly calls the unregister routine for the failed entry repeatedly, instead of releasing the algorithms that were successfully registered in earlier iterations. This leaves those prior registrations in place and can destabilize the driver or crash the kernel. The fix makes the cleanup loop use the correct index so each previously registered algorithm set is unregistered. The flaw can only be reached during driver initialization, which occurs at system boot or when the kernel module is loaded by a privileged user.
Lifecycle
03Fix Versions
| Branch | Introduced | Fixed in | Patch commit |
|---|---|---|---|
| 5.15 | 5.15.179 | 5.15.217 | fef187c6194d |
| 6.1 | 6.1.129 | 6.1.184 | 1ece8e16c085 |
| 5.4 | 5.4.291 | 5.5 | a134e4b8102c |
| 6.13 | 6.13.3 | 6.14 | 4e88b4fda482 |
| 6.18 | — | 6.18.46 | 9c7540228640 |
| 7.1 | — | 7.1.10 | — |
| mainline | — | 7.2 | — |
| 6.12 | 6.12.14 | 6.12.105 | c7dc487aade1 |
| 5.10 | 5.10.235 | 5.10.266 | dbca8b798caf |
| 6.6 | 6.6.78 | 6.6.153 | de52c713d218 |
| cip/5.10 | — | 5.10.268-cip77 | dbca8b798caf |
| cip/5.10-rt | — | 5.10.268-cip77-rt34 | dbca8b798caf |
| cip/6.1 | — | 6.1.187-cip60 | 1ece8e16c085 |
| cip/6.12 | — | 6.12.108-cip31 | c7dc487aade1 |