CVE-2026-46077

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description An issue exists in the atmel-tdes crypto component where the DMA output dma addr out is synced using dma sync single for device() instead of dma sync single for cpu() before being consumed by the CPU. On non-coherent platforms, using the incorrect sync direction can result in the CPU receiving stale cache data.

Recommendations Update to a version of the Linux kernel where the dma sync single for cpu() function is correctly implemented for dma addr out. Update openSUSE Tumbleweed to kernel-devel-7.0.11-1.1.