CVE-2026-82390

Name of the Vulnerable Software and Affected Versions Espressif AES driver (affected versions not specified)

Description The Espressif AES driver in drivers/crypto/crypto esp32 aes.c contains a flaw in its multi-session cipher API. While the driver allows multiple independent sessions, the AES peripheral uses a single set of chip-global key and mode registers. The aes begin session() function programs these registers only once at the start of a session and does so outside the aes lock mutex. Consequently, the operation handlers aes ecb op(), aes cbc op(), and aes ctr op() execute aes hal transform block() using whatever key and direction are currently stored in the global registers.

This leads to a race condition where opening a second session with a different key causes subsequent operations on the first session to silently use the second session's key and direction. An attacker capable of inducing session creation can influence which key is active during a victim's operation. This results in a cryptographic failure where data is encrypted or decrypted with the wrong key, potentially allowing an attacker to recover plaintext or invert the operation direction if they provided the resident key.

Recommendations Update the driver to a version where hardware access is removed from aes begin session() and the key and direction are reprogrammed at the start of every operation within the aes lock mutex.