High 7.8Published Aug 26, 2026

CVE-2026-80565crypto: qce - fix error path in devm_qce_register_algs

Updated under an hour ago (Oct 27, 2026, 11:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedly calls the same ops->unregister_algs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 27, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9e403fea74ecbe6b4a4321f13bd4bc929382908d before dbca8b798caf47fb2799a26dd09c9ad66305883d; from f52f00efd8c0088992ac07ef46af6096e4f0e52e before fef187c6194d67395182d58169dd14ba631f1b41; 5d5b673b4dd260226b2202f66a920566c27051f3 builds before 1ece8e16c085e8cd60ecbdb641269aaa53d31da4; from e914b2f795b6995bb0e7db45caa4a912dca09e65 before de52c713d21806b93b00a6074056b57aec4f8919; from 76e6d50fa5a2fb466edcc8b513d7aad372312c2a before c7dc487aade12c692add3221673c9bdf32dc24f5; from e80cf84b608725303113d6fe98bb727bf7b7a40d before a134e4b8102c077286818ee112b9f925db613d4c; from e80cf84b608725303113d6fe98bb727bf7b7a40d before 4e88b4fda48282f3fd504b4d4f5d2d4f996b76ce; from e80cf84b608725303113d6fe98bb727bf7b7a40d before 9c75402286409f5e1a75e4a445555c84066f89db; and 9 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/dbca8b798caf47fb2799a26dd09c9ad66305883d
https://git.kernel.org/stable/c/fef187c6194d67395182d58169dd14ba631f1b41
https://git.kernel.org/stable/c/1ece8e16c085e8cd60ecbdb641269aaa53d31da4
https://git.kernel.org/stable/c/de52c713d21806b93b00a6074056b57aec4f8919
https://git.kernel.org/stable/c/c7dc487aade12c692add3221673c9bdf32dc24f5
https://git.kernel.org/stable/c/a134e4b8102c077286818ee112b9f925db613d4c
https://git.kernel.org/stable/c/4e88b4fda48282f3fd504b4d4f5d2d4f996b76ce
https://git.kernel.org/stable/c/9c75402286409f5e1a75e4a445555c84066f89db

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.