CVE-2026-63805
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
19/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: nx - fix nx_crypto_ctx_exit argument<br />
<br />
nx_crypto_ctx_shash_exit calls nx_crypto_ctx_exit with crypto_shash_ctx(...)<br />
but crypto_shash_ctx gives a nx_crypto_ctx *, not a crypto_tfm *.<br />
<br />
Fix the type in nx_crypto_ctx_exit and drop the bogus crypto_tfm_ctx<br />
call.<br />
<br />
This fixes the following oops:<br />
<br />
BUG: Unable to handle kernel data access at 0xc0403effffffffc8<br />
Faulting instruction address: 0xc000000000396cb4<br />
Oops: Kernel access of bad area, sig: 11 [#15]<br />
Call Trace:<br />
nx_crypto_ctx_shash_exit+0x24/0x60<br />
crypto_shash_exit_tfm+0x28/0x40<br />
crypto_destroy_tfm+0x98/0x140<br />
crypto_exit_ahash_using_shash+0x20/0x40<br />
crypto_destroy_tfm+0x98/0x140<br />
hash_release+0x1c/0x30<br />
alg_sock_destruct+0x38/0x60<br />
__sk_destruct+0x48/0x2b0<br />
af_alg_release+0x58/0xb0<br />
__sock_release+0x68/0x150<br />
sock_close+0x20/0x40<br />
__fput+0x110/0x3a0<br />
sys_close+0x48/0xa0<br />
system_call_exception+0x140/0x2d0<br />
system_call_common+0xf4/0x258<br />
<br />
.. which came from hardlink(1) opportunistically using AF_ALG.<br />
<br />
The same problem exists with nx_crypto_ctx_skcipher_exit getting a context<br />
it wasn&#39;t expecting, but apparently nobody hit that for years.



