CVE-2026-41515 OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery

What is CVE-2026-41515?

CVE-2026-41515 is a low-severity vulnerability in OP-TEE optee_os, published on 6 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses non-constant-time `memcmp()` for label hash verification and has multiple distinguishable error paths. This creates a Manger-style padding oracle that allows an attacker to recover RSA-OAEP plaintext with approximately 1000-2000 adaptive chosen ciphertext queries. Version 4.11.0 contains a patch. As a workaround, disable the NXP CAAM RSA driver with `CFG_CRYPTO_DRV_RSA=n`.

Weakness: CWE-208

Which versions are affected by CVE-2026-41515?

It affects 1 product.

Products include Trustedfirmware Op-Tee.

How do I fix CVE-2026-41515?

No fix has been published for CVE-2026-41515 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-41515 being exploited?

There is no known exploitation of CVE-2026-41515 in the wild and no public exploit code.

Other vulnerabilities in OP-TEE optee_os

• CVE-2019-1010292 Memory corruption in OP-TEE Critical 9.8
• CVE-2019-1010293 Memory corruption in OP-TEE Critical 9.8
• CVE-2019-1010295 Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. Critical 9.8
• CVE-2019-1010296 Memory corruption in OP-TEE Critical 9.8
• CVE-2019-1010297 Memory corruption in OP-TEE Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2026-41515, GHSA-5q45-58r5-cq4g, UBUNTU-CVE-2026-41515.