CVE-2026-80832
Received Received - Intake

Buffer Underallocation in Linux Kernel Crypto QCE

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qce_aead_ccm_prepare_buf_assoclen() can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as: ALIGN(assoclen, 16) + MAX_CCM_ADATA_HEADER_LEN while the DMA length is set to: ALIGN(assoclen + adata_header_len, 16) Since ALIGN() does not distribute over addition, the allocation can be smaller than the DMA length. For example, when assoclen = 32 and adata_header_len = 2: allocation = ALIGN(32, 16) + 6 = 38 DMA length = ALIGN(32 + 2, 16) = 48 As a result, the QCE hardware can read beyond the allocated buffer while computing the CBC-MAC over the associated data. The extra bytes are folded into the authentication tag, resulting in an incorrect tag and causing CCM self-test failures such as: alg: aead: ccm-aes-qce encryption test failed (wrong result) on test vector 8 Fix the allocation by adding the maximum possible AAD header length before alignment: ALIGN(assoclen + MAX_CCM_ADATA_HEADER_LEN, 16) This guarantees that the allocated buffer is large enough for the fully padded AAD data for all supported header sizes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80832
EUVD
EUVD-2026-71282

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a buffer underallocation issue in the crypto subsystem, specifically in the QCE (Qualcomm Crypto Engine) CCM (Counter with CBC-MAC) mode implementation. The AAD (Additional Authenticated Data) buffer is allocated with insufficient size, leading to potential out-of-bounds memory access during DMA operations. The miscalculation occurs because the allocation size does not account for the full padded length of the AAD data, causing hardware to read beyond the buffer and corrupt authentication tags.

Detection Guidance

This vulnerability is specific to the Linux kernel's crypto subsystem and may not have direct network detection methods. Check kernel logs for CCM self-test failures like 'alg: aead: ccm-aes-qce encryption test failed (wrong result)' after encryption operations.

Impact Analysis

This vulnerability can cause cryptographic operations to fail, particularly during CCM mode encryption or decryption. It may result in incorrect authentication tags, leading to failed self-tests and potential data corruption or security failures in systems relying on QCE hardware acceleration for cryptographic operations.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-80832. The fix changes the AAD buffer allocation logic in the QCE crypto driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80832. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart