Description
In the Linux kernel, the following vulnerability has been resolved:

crypto: inside-secure/eip93 - fix kernel panic in driver detach

During driver detach, the same hash algorithm is unregistered multiple
times due to a wrong iterator.
Published: 2026-05-27
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

During driver detach in the Linux kernel, an incorrect iterator causes the same hash algorithm to be unregistered twice, leading to a kernel panic. This flaw permits a local attacker with sufficient privileges to force the kernel to crash, resulting in complete loss of system availability.

Affected Systems

All Linux kernel versions that include the vulnerable inside-secure/eip93 driver code before the commits that fixed the bug are affected. No specific release numbers are listed, but any kernel containing the original unpatched driver implementation is at risk. The vendor is the Linux kernel project.

Risk and Exploitability

Exploitability requires a local privileged user able to unload or reload the kernel module. The EPSS score is less than 1%, indicating a low probability that the vulnerability will be actively exploited. The vulnerability is not listed in the CISA KEV catalog. The severity of an immediate kernel panic is critical, and the likely attack vector is local, requiring privileged interaction with the kernel module.

Generated by OpenCVE AI on May 28, 2026 at 16:44 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Linux kernel patch that contains commit 7530c3595d1e23bc5938cbd44b7e8f33457fc71f, which fixes the double‑unregister bug in the inside‑secure/eip93 driver.
  • Reboot the system after applying the patch so the kernel loads the updated driver.
  • If an immediate update is not possible, avoid unloading the vulnerable driver until the patch is applied, and restrict kernel module unload privileges to privileged users only.

Generated by OpenCVE AI on May 28, 2026 at 16:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 28 May 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Thu, 28 May 2026 12:15:00 +0000


Wed, 27 May 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - fix kernel panic in driver detach During driver detach, the same hash algorithm is unregistered multiple times due to a wrong iterator.
Title crypto: inside-secure/eip93 - fix kernel panic in driver detach
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:17:54.131Z

Reserved: 2026-05-13T15:03:33.087Z

Link: CVE-2026-45937

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:17:09.867

Modified: 2026-06-17T10:52:45.593

Link: CVE-2026-45937

cve-icon Redhat

Severity :

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-45937 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T16:45:20Z

Weaknesses
  • CWE-911

    Improper Update of Reference Count