CVE-2026-80522 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-80522?
CVE-2026-80522 is a high-severity vulnerability in Linux, published on 26 Aug 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()
Perform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way it is done in tegra_ccm_crypt_init(). The current formulae may lead to a crash if a caller does not call tegra_gcm_setauthsize() and so ctx->authsize remains zero. Then a decrypt operation with incorrect rctx->cryptlen will lead to a write beyound rctx->dst_sg buffer.
As a follow-up cleanup delete struct tegra_aead_ctx->authsize field since it appears to be completely unused. Also simplify tegra_ccm_setauthsize() and tegra_gcm_setauthsize() functions respectively.
Which versions are affected by CVE-2026-80522?
How do I fix CVE-2026-80522?
Upgrade to a fixed version.
Is CVE-2026-80522 being exploited?
There is no known exploitation of CVE-2026-80522 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-80522, DEBIAN-CVE-2026-80522, GHSA-fhv2-cf5f-4mpm, UBUNTU-CVE-2026-80522.