{"id":"CVE-2026-93160","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-ecc - reject hardware ECDH without a public key\n\nThe hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the\nprivate key stored in the device","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-ecc - reject hardware ECDH without a public key\n\nThe hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the\nprivate key stored in the device. H…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < 5e33791dfcc6459e402a524669093cd953d5b2df","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < 33241f198287960bba5fc2251400896762650bfa","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < 3ea8b780d68f02fe235c5051ce8ac4b4940b9259","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < 6457162f74f45284ade2da644a4f0c54758ac0a6","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < 2b40bab362d2b598f34e5ccd4694cedc3c2553d4","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < e64d6f1aae8c837cb3f0446bf44108226d7370f4","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < add28e9988902d29ea93f4869280b4a16a049ea5","Linux >= 11105693fa05f499532b330da65c78ff93ed4440 < f240f9b588f4e2de89822adebf560a96b5d263ed","Linux 4.14"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:18:11.407","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93160","references":[{"url":"https://git.kernel.org/stable/c/2b40bab362d2b598f34e5ccd4694cedc3c2553d4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/33241f198287960bba5fc2251400896762650bfa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3ea8b780d68f02fe235c5051ce8ac4b4940b9259","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5e33791dfcc6459e402a524669093cd953d5b2df","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6457162f74f45284ade2da644a4f0c54758ac0a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/add28e9988902d29ea93f4869280b4a16a049ea5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e64d6f1aae8c837cb3f0446bf44108226d7370f4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f240f9b588f4e2de89822adebf560a96b5d263ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.735Z","epss":0.00177,"epssPercentile":0.07472,"slug":"CVE-2026-93160","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: atmel-ecc - reject hardware ECDH without a public key\n\nThe hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the\nprivate key stored in the device. However, the public key is cached only\nafter atmel_ecdh_set_secret() successfully generated that private key\nfor the current tfm.\n\natmel_ecdh_generate_public_key() already rejects requests when no public\nkey is cached. Add the same check to atmel_ecdh_compute_shared_secret()\nto prevent the device from using a private key that was not generated\nfor the current tfm.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}