CVE-2026-80522

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tegra gcm do one req() function where the rctx->cryptlen calculation is performed incorrectly. If a caller fails to invoke tegra gcm setauthsize(), the ctx->authsize variable remains zero. During a decryption operation, this incorrect calculation can result in a write beyond the rctx->dst sg buffer, potentially leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.