CVE-2026-93160

A flaw was found in the Linux kernel's atmel-ecc cryptographic driver. The hardware Elliptic Curve Diffie-Hellman (ECDH) computation could use a private key that was not generated for the current cryptographic operation. This issue arises because the public key is only cached after a private key is successfully generated, and the atmel_ecdh_compute_shared_secret() function did not verify the presence of a cached public key. An attacker could potentially exploit this to cause incorrect cryptographic key exchanges, leading to a compromise of data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.