Linux Kernel Vulnerability in Crypto QCE Registration Process

CVE-2026-80565

What is CVE-2026-80565?

A vulnerability in the Linux kernel's crypto QCE module allows for potential mishandling of algorithm registration failures. Specifically, when the ops->register_algs() function encounters an error, the error handling mechanism may incorrectly attempt to unregister algorithms in a loop without properly indexing them. This flawed error path could lead to unexpected behaviors or resource leaks, impacting the stability and security of systems relying on these algorithms. Correcting this issue ensures that previously registered algorithms are accurately unregistered, maintaining system integrity.

References