CVE-2026-80882

A flaw was found in the Linux kernel's Tegra cryptography module. This vulnerability occurs when the system fails to properly return an ENOMEM error value if an input buffer allocation fails during cryptographic operations in the tegra_ccm_do_one_req function. An attacker could potentially exploit this by triggering memory allocation failures, leading to a denial of service (DoS) condition where the system becomes unresponsive or crashes.

This vulnerability is rated as Moderate severity because exploitation requires local access and can only lead to a denial of service without compromising data confidentiality or integrity. The affected driver specifically supports the NVIDIA Tegra Security Engine, limiting practical exposure to environments deployed on specialized Tegra SoC hardware. Standard enterprise deployments lacking this hardware do not initialize or expose the vulnerable code path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.