Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2026-80565— crypto: qce - fix error path in devm_qce_register_algs

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux 内核中已修复以下漏洞: crypto: qce - 修复 devm_qce_register_algs 中的错误处理路径问题 如果 调用失败,原有的错误处理路径会重复调用 来注销刚刚失败的注册。修复方法是改用循环索引来注销此前已成功注册的算法,从而避免重复调用导致的逻辑错误。

AI Predicted 5.5 Difficulty: Theoretical

Possible ATT&CK Techniques 1 AI

T1201 · Password Policy Discovery
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-80565

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
crypto: qce - fix error path in devm_qce_register_algs
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedly calls the same ops->unregister_algs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 9e403fea74ecbe6b4a4321f13bd4bc929382908d ~ dbca8b798caf47fb2799a26dd09c9ad66305883d -
Linux Linux 6.14 -

II. Public POCs for CVE-2026-80565

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-80565

登录查看更多情报信息。

Patches & Fixes for CVE-2026-80565 (8)

Same Patch Batch · Linux · 2026-08-26 · 92 CVEs total

CVE-2026-80557 libceph: fix OOB read in decode_watchers() via missing bounds check
CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues
CVE-2026-80552 s390/vfio_ccw: Ensure index for read/write regions are within range
CVE-2026-80549 s390/vfio_ccw: Move cp cleanup out of not operational
CVE-2026-80546 s390/zcrypt: Improve CCA CPRB length and overflow checks
CVE-2026-80547 s390/vfio_ccw: Implement a crw lock
CVE-2026-80545 s390/zcrypt: Improve EP11 CPRB length and overflow checks
CVE-2026-80543 s390/zcrypt: Pad trailing CCA or EP11 message with zeros
CVE-2026-80548 s390/vfio_ccw: Selectively expand io_mutex
CVE-2026-80555 s390/vfio_ccw: Free all memory if cp_init() fails
CVE-2026-80554 s390/vfio_ccw: Limit the number of channel program segments
CVE-2026-80556 mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
CVE-2026-80559 Input: sur40 - fix input device registration ordering
CVE-2026-80558 libceph: Avoid using invalid osd indices from primary_temp
CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn
CVE-2026-80561 libceph: fix multiple unsafe decodes in decode_locker()
CVE-2026-80562 gpio: ml-ioh: use raw_spinlock_t for the register lock
CVE-2026-80563 gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
CVE-2026-80564 gve: fix NULL dereference due to missing ptp adjfine
CVE-2026-80566 Input: hynitron_cstxxx - validate touch count and finger IDs

Showing top 20 of 92 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-80565

No comments yet


Leave a comment