CVE-2022-49260

CVE-2022-49260

Critical · published February 26, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/sec - fix the aead software fallback for engine

Due to the subreq pointer misuse the private context memory. The aead

soft crypto occasionally casues the OS panic as setting the 64K page.

Here is fix it.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.3th percentile
Published
2025-02-26T12:01Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14, < 5.15.335.15.33
linux/linux_kernel≥ 5.16, < 5.16.195.16.19
linux/linux_kernel≥ 5.17, < 5.17.25.17.2
References (4)
https://git.kernel.org/stable/c/0a2a464f863187f97e96ebc6384c052cafd4a54c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/40dba7c26e897c637e91312b35f664f1d4d0073c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5c1149e2abe0b7489300736b8277b45b113de67f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ef7b10f3cac7810ddcfd976304fd125aca33d144 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 FEB 01:56Z
    crypto: hisilicon/sec - fix the aead software fallback for engine
    cvelistv5