CVE-2022-49260

CriticalCVSS 9.8

Published: 26/02/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

47th percentile - higher than 47% of all known CVEs

Summary

In the Linux kernel, in the hisilicon/sec crypto driver, a bug with the aead software fallback was fixed. Misuse of the subreq pointer caused occasional OS panics when setting the 64K page.

Risk Assessment

The vulnerability could lead to system crashes (panics) in environments using HiSilicon cryptographic acceleration.

Recommendation

Apply the Linux kernel update containing the fix for hisilicon/sec.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it.