CVE-2026-53302

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the eip93 hmac setkey() function where it incorrectly uses the CRYPTO ALG ASYNC mask when allocating a temporary ahash transform. Because EIP93 hash algorithms are inherently asynchronous, this mask excludes them from the lookup, causing the process to fail. When triggered via the AEAD setkey path, this failure results in a partially initialized SA record with zeroed digest fields. Consequently, subsequent crypto operations attempt to dereference a NULL pointer in the request context, leading to a kernel panic. The fault occurs specifically when the system attempts to load ctx->flags from a NULL transform context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.