Description
In the Linux kernel, the following vulnerability has been resolved:

crypto: inside-secure/eip93 - fix kernel panic in driver detach

During driver detach, the same hash algorithm is unregistered multiple
times due to a wrong iterator.
Published: 2026-05-27
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

During driver detach in the Linux kernel, an incorrect iterator causes the same hash algorithm to be unregistered twice, leading to a kernel panic. This flaw permits an attacker to force the kernel to crash, resulting in complete loss of system availability.

Affected Systems

All Linux kernel versions that include the vulnerable inside-secure/eip93 driver code before the commits that fixed the bug are affected. No specific release numbers are listed, but any kernel containing the original unpatched driver implementation is at risk. The vendor is the Linux kernel project.

Risk and Exploitability

Exploitability requires local privileged instructions to unload or reload the kernel module; based on the description, it is inferred that an attacker would need such privileges to trigger the flaw. The EPSS score is less than 1%, indicating a low probability of active exploitation. This vulnerability is not listed in the CISA KEV catalog. With a CVSS score of 5.5 the flaw carries medium severity; the resulting kernel panic causes a denial of service. The flaw corresponds to CWE-911, reflecting improper resource lifecycle management.

Generated by OpenCVE AI on August 13, 2026 at 23:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Linux kernel patch that contains commit 7530c3595d1e23bc5938cbd44b7e8f33457fc71f, which fixes the double‑unregister bug in the inside‑secure/eip93 driver.
  • Reboot the system after applying the patch so the kernel loads the updated driver.
  • If an immediate update is not possible, avoid unloading the vulnerable driver until the patch is applied, and restrict kernel module unload privileges to privileged users only.

Generated by OpenCVE AI on August 13, 2026 at 23:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 28 May 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Thu, 28 May 2026 12:15:00 +0000


Wed, 27 May 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - fix kernel panic in driver detach During driver detach, the same hash algorithm is unregistered multiple times due to a wrong iterator.
Title crypto: inside-secure/eip93 - fix kernel panic in driver detach
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:17:54.131Z

Reserved: 2026-05-13T15:03:33.087Z

Link: CVE-2026-45937

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-05-27T14:17:09.867

Modified: 2026-06-24T17:09:52.983

Link: CVE-2026-45937

cve-icon Redhat

Severity :

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-45937 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T23:15:12Z

Weaknesses