Linux Kernel Vulnerability in EIP93 Hash Algorithm Implementation

CVE-2026-53302

What is CVE-2026-53302?

A vulnerability in the Linux Kernel's implementation of the EIP93 hash algorithms occurs when the system attempts to allocate a cryptographic transform. The request can result in a kernel panic due to the mishandling of NULL pointers caused by a failed cryptographic operation initialized incorrectly. This flaw is linked to the exclusion of asynchronous algorithms during the allocation process, which leads to an incomplete setup of the cryptographic context. The fix involves modifying the allocation call to permit async algorithms, ensuring smoother performance and preventing potential application crashes.

References