Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-80565— crypto: qce - fix error path in devm_qce_register_algs

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux 内核中已修复以下漏洞: crypto: qce - 修复 devm_qce_register_algs 中的错误处理路径问题 如果 调用失败,原有的错误处理路径会重复调用 来注销刚刚失败的注册。修复方法是改用循环索引来注销此前已成功注册的算法,从而避免重复调用导致的逻辑错误。

CVSS 7.8 · High EPSS 0.18% · P7

Possible ATT&CK Techniques 1 AI

T1201 · Password Policy Discovery

Affected Version Matrix 27

VendorProduct Version RangeStatus
Linux Linux 9e403fea74ecbe6b4a4321f13bd4bc929382908d< dbca8b798caf47fb2799a26dd09c9ad66305883d affected
f52f00efd8c0088992ac07ef46af6096e4f0e52e< fef187c6194d67395182d58169dd14ba631f1b41 affected
5d5b673b4dd260226b2202f66a920566c27051f3< 1ece8e16c085e8cd60ecbdb641269aaa53d31da4 affected
e914b2f795b6995bb0e7db45caa4a912dca09e65< de52c713d21806b93b00a6074056b57aec4f8919 affected
76e6d50fa5a2fb466edcc8b513d7aad372312c2a< c7dc487aade12c692add3221673c9bdf32dc24f5 affected
e80cf84b608725303113d6fe98bb727bf7b7a40d< a134e4b8102c077286818ee112b9f925db613d4c affected
e80cf84b608725303113d6fe98bb727bf7b7a40d< 4e88b4fda48282f3fd504b4d4f5d2d4f996b76ce affected
e80cf84b608725303113d6fe98bb727bf7b7a40d< 9c75402286409f5e1a75e4a445555c84066f89db affected
… +19 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-80565

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
crypto: qce - fix error path in devm_qce_register_algs
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedly calls the same ops->unregister_algs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 9e403fea74ecbe6b4a4321f13bd4bc929382908d ~ dbca8b798caf47fb2799a26dd09c9ad66305883d -
Linux Linux 6.14 -

II. Public POCs for CVE-2026-80565

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-80565

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-80565 (8)

Same Patch Batch · Linux · 2026-08-26 · 92 CVEs total

CVE-2026-80589 9.8 CRITICAL block: stop the timeout timer when releasing a never added disk
CVE-2026-74752 9.8 CRITICAL sctp: validate cookie AUTH state before use
CVE-2026-80519 9.8 CRITICAL ovpn: finish crypto callback cleanup before peer release
CVE-2026-80528 9.8 CRITICAL ceph: avoid fs reclaim while using current->journal_info
CVE-2026-74746 9.8 CRITICAL netfilter: flowtable: publish GC-visible tuple last
CVE-2026-80561 9.8 CRITICAL libceph: fix multiple unsafe decodes in decode_locker()
CVE-2026-74744 9.8 CRITICAL ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
CVE-2026-74743 9.8 CRITICAL macvlan: inherit needed_headroom and needed_tailroom from lowerdev
CVE-2026-80558 9.8 CRITICAL libceph: Avoid using invalid osd indices from primary_temp
CVE-2026-80586 9.8 CRITICAL mptcp: options: reset DSS fields in case of unexpected size
CVE-2026-80557 9.8 CRITICAL libceph: fix OOB read in decode_watchers() via missing bounds check
CVE-2026-74737 9.8 CRITICAL net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
CVE-2026-80587 9.8 CRITICAL mptcp: avoid combining some incoming suboptions
CVE-2026-80585 9.4 CRITICAL mptcp: fastopen: only mark MPTFO subflows with SYN data
CVE-2026-74751 9.4 CRITICAL riscv: lib: Fix ZBB strnlen reading past count boundary
CVE-2026-80554 9.3 CRITICAL s390/vfio_ccw: Limit the number of channel program segments
CVE-2026-80551 9.3 CRITICAL s390/vfio_ccw: Ensure first IDAW remains constant
CVE-2026-80547 8.8 HIGH s390/vfio_ccw: Implement a crw lock
CVE-2026-80576 8.8 HIGH drm/amdgpu: reject oversized IBs with per-ring packet limits
CVE-2026-80552 8.8 HIGH s390/vfio_ccw: Ensure index for read/write regions are within range

Showing top 20 of 92 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2026-80565

No comments yet


Leave a comment