{"id":"CVE-2026-93155","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: keembay - Fix AEAD unregister count in error path\n\nregister_aes_algs() registers the AEAD algorithms before registering the\nskcipher algorithms","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: keembay - Fix AEAD unregister count in error path\n\nregister_aes_algs() registers the AEAD algorithms before registering the\nskcipher algorithms.  If skcipher re…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 88574332451380f4b51f6ca88ab9810e714bfb9b < 27ec91c29ee155cc507b2f56221fc6fab65dbb51","Linux >= 88574332451380f4b51f6ca88ab9810e714bfb9b < 5607b101d86cbee8dd1ffab784495c880ca73383","Linux >= 88574332451380f4b51f6ca88ab9810e714bfb9b < 5bbb726d27ff6dff750264e51aa665538394d0f8","Linux >= 88574332451380f4b51f6ca88ab9810e714bfb9b < a3217fe7998622728a53dff405615e0971949eaf","Linux >= 88574332451380f4b51f6ca88ab9810e714bfb9b < e264401ce4776a288524e5b87593d4d864147115","Linux 5.11"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:18:10.813","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93155","references":[{"url":"https://git.kernel.org/stable/c/27ec91c29ee155cc507b2f56221fc6fab65dbb51","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5607b101d86cbee8dd1ffab784495c880ca73383","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5bbb726d27ff6dff750264e51aa665538394d0f8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a3217fe7998622728a53dff405615e0971949eaf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e264401ce4776a288524e5b87593d4d864147115","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.740Z","epss":0.002,"epssPercentile":0.10116,"slug":"CVE-2026-93155","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: keembay - Fix AEAD unregister count in error path\n\nregister_aes_algs() registers the AEAD algorithms before registering the\nskcipher algorithms.  If skcipher registration fails, the function unwinds\nthe earlier AEAD registration with crypto_engine_unregister_aeads(), but it\npasses ARRAY_SIZE(algs), which is the skcipher table size.\n\nUse ARRAY_SIZE(algs_aead) for the AEAD unwind path so the unregister helper\niterates over the same table that was registered.  Also clarify the nearby\ncomment: the crypto registration helpers clean up algorithms registered\nwithin the same call, while this function must still unwind earlier\nsuccessful registration steps.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}