CVE-2026-93160

CVE-2026-93160

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: atmel-ecc - reject hardware ECDH without a public key

The hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the

private key stored in the device. However, the public key is cached only

after atmel_ecdh_set_secret() successfully generated that private key

for the current tfm.

atmel_ecdh_generate_public_key() already rejects requests when no public

key is cached. Add the same check to atmel_ecdh_compute_shared_secret()

to prevent the device from using a private key that was not generated

for the current tfm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-09-17T21:18Z
References (8)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:11Z
    crypto: atmel-ecc - reject hardware ECDH without a public key
    cvelistv5