CVE-2026-40257

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.21.0 through 4.10.0

Description An off-by-one error exists in the ARM Crypto Extensions accelerated SHA-3 implementation. This flaw can lead to a massive heap overflow, resulting in the corruption of TEE kernel memory following the hash state. The issue specifically impacts platforms configured with CFG CRYPTO WITH CE82=y, which enables SHA3 Crypto Extensions on ARMv8.2+ architectures.

Recommendations Update to version 4.11.0. Disable SHA3 Crypto Extensions by setting CFG CRYPTO WITH CE82=n.