CVE Database›Document archive›CVE-2026-90069

CVE-2026-90069

kernel: crypto: acomp - allocate async request context when cloning

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 13, 2026

Description

A flaw was found in the Linux kernel's cryptographic acceleration (acomp) component. This vulnerability arises when the system attempts to clone a cryptographic request, but insufficient memory is allocated for asynchronous operations. This can lead to an out-of-bounds write, where data is written beyond its intended memory boundary. A local attacker could potentially exploit this memory corruption, leading to a system crash (Denial of Service) or potentially gaining elevated privileges.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-787 · Out-of-bounds Write