High 7.8Published Feb 18, 2026

CVE-2026-23222crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

Updated under an hour ago (Oct 27, 2026, 6:50 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly The existing allocation of scatterlists in omap_crypto_copy_sg_lists() was allocating an array of scatterlist pointers, not scatterlist objects, resulting in a 4x too small allocation. Use sizeof(*new_sg) to get the correct object size.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 before 953c81941b0ad373674656b8767c00234ebf17ac; 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 builds before 31aff96a41ae6f1f1687c065607875a27c364da8; from 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 before 79f95b51d4278044013672c27519ae88d07013d8; 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 builds before 6edf8df4bd29f7bfd245b67b2c31d905f1cfc14b; from 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 before c184341920ed78b6466360ed7b45b8922586c38f; 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 builds before 2ed27b5a1174351148c3adbfc0cd86d54072ba2e; from 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 before d1836c628cb72734eb5f7dfd4c996a9c18bba3ad; from 74ed87e7e7f7197137164738dd0610ccd5ec5ed1 before 1562b1fb7e17c1b3addb15e125c718b2be7f5512	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V4.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.13 before 5.10.251; from 5.11 before 5.15.201; from 5.16 before 6.1.164; from 6.2 before 6.6.125; from 6.7 before 6.12.72; from 6.13 before 6.18.11; from 6.19 before 6.19.1	NVD

References

References

https://git.kernel.org/stable/c/953c81941b0ad373674656b8767c00234ebf17ac	patch
https://git.kernel.org/stable/c/31aff96a41ae6f1f1687c065607875a27c364da8	patch
https://git.kernel.org/stable/c/79f95b51d4278044013672c27519ae88d07013d8	patch
https://git.kernel.org/stable/c/6edf8df4bd29f7bfd245b67b2c31d905f1cfc14b	patch
https://git.kernel.org/stable/c/c184341920ed78b6466360ed7b45b8922586c38f	patch
https://git.kernel.org/stable/c/2ed27b5a1174351148c3adbfc0cd86d54072ba2e	patch
https://git.kernel.org/stable/c/d1836c628cb72734eb5f7dfd4c996a9c18bba3ad	patch
https://git.kernel.org/stable/c/1562b1fb7e17c1b3addb15e125c718b2be7f5512	patch
https://cert-portal.siemens.com/productcert/html/ssa-253495.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.