CVE-2026-53302

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

crypto: eip93 - fix hmac setkey algo selection

eip93_hmac_setkey() allocates a temporary ahash transform for

computing HMAC ipad/opad key material. The allocation uses the

driver-specific cra_driver_name (e.g. "sha256-eip93") but passes

CRYPTO_ALG_ASYNC as the mask, which excludes async algorithms.

Since the EIP93 hash algorithms are the only ones registered

under those driver names and they are inherently async, the

lookup is self-contradictory and always fails with -ENOENT.

When called from the AEAD setkey path, this failure leaves the

SA record partially initialized with zeroed digest fields. A

subsequent crypto operation then dereferences a NULL pointer in

the request context, resulting in a kernel panic:

```

pc : eip93_aead_handle_result+0xc8c/0x1240 [crypto_hw_eip93]

lr : eip93_aead_handle_result+0xbec/0x1240 [crypto_hw_eip93]

sp : ffffffc082feb820

x29: ffffffc082feb820 x28: ffffff8011043980 x27: 000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References