CVE-2026-80522

A flaw was found in the Linux kernel's Tegra cryptography module. An incorrect calculation in the 'tegra_gcm_do_one_req()' function, specifically when handling the 'cryptlen' parameter, can occur if a caller does not properly initialize the authentication size. This can lead to a write beyond the intended memory buffer during a decrypt operation, potentially causing a system crash (Denial of Service).

This vulnerability is rated as an Important severity flaw because an authenticated local user can trigger an out-of-bounds kernel memory write to achieve local privilege escalation or induce a system crash. The issue is confined to the Tegra Security Engine AES/GCM decryption routines and is only reachable on platforms operating on NVIDIA Tegra System-on-Chip (SoC) hardware with this driver active. Deployments on standard enterprise architectures lacking Tegra hardware, or systems where this hardware accelerator driver is not loaded, are not exposed to this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To prevent the tegra_se_aes crypto module from being loaded, blacklist it by creating a configuration file. Create /etc/modprobe.d/blacklist-tegra.conf with the content:

blacklist tegra_se_aes

Then, regenerate the initramfs and reboot the system for the changes to take effect:

dracut -f -v $(uname -r)
reboot

This action may affect system functionality if NVIDIA Tegra hardware and its cryptographic features are actively utilized.