CVE-2026-80832

A flaw was found in the Linux kernel's QCE (Qualcomm Crypto Engine) cryptographic module. An issue with buffer underallocation in the qce_aead_ccm_prepare_buf_assoclen() function can lead to the allocated AAD (Additional Authenticated Data) buffer being smaller than required for DMA (Direct Memory Access) operations. This allows the QCE hardware to read beyond the buffer's boundaries when computing the CBC-MAC (Cipher Block Chaining Message Authentication Code) for associated data. As a result, extra data is incorporated into the authentication tag, which can lead to an incorrect tag and impact the integrity and authentication of cryptographic operations.

A buffer size calculation bug in the Qualcomm QCE CCM AAD path can allocate an AAD buffer smaller than the length later programmed into the DMA scatterlist. The hardware can then perform an out-of-bounds DMA read past the allocated buffer while computing the CBC-MAC over associated data. The directly observed impact is incorrect CCM authentication tags and crypto self-test failures, which can break AEAD operation and cause denial of service for users of the affected hardware crypto path. For the CVSS the PR:L is used because reliable triggering normally requires a local process or kernel consumer that can submit AEAD CCM requests through the crypto API or AF_ALG on a system with QCE hardware enabled. The issue is not directly network reachable by itself. Paranoid impact includes limited confidentiality concern because adjacent memory bytes may influence the generated authentication tag, but there is no clear write primitive or direct privilege escalation path from this patch alone.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.