CVE-2026-92476
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Initialize completion before requesting IRQ kmb_ocs_aes_probe() requests the device IRQ before initializing irq_completion. Once the handler is registered it can run immediately, and ocs_aes_irq_handler() unconditionally calls complete(). An interrupt in this window would therefore use an uninitialized completion. Initialize the completion before requesting the IRQ, as the sibling OCS HCU and ECC drivers already do.
How to fix
- Linux Linuxa3ffced8be1555f283680065c3b87a19f5ab9097, 4ce407055ae9d37f46a3c6f05eb27198b354d287, d52a15c4559b69805bc69bf4ad9e16bbf6480d52, f8970ee9e315c9e2258ae8914d5fb32b1039d2f6, 7efb51a5893b22003a679d088b7794be2ccd6c32, 5aae80dcec0748b4ed61daace2ad8b12082261f2, fce20289dd622cc7ab78d72c8a979a9f8b7cb10e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < a3ffced8be1555f283680065c3b87a19f5ab9097, 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < 4ce407055ae9d37f46a3c6f05eb27198b354d287, 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < d52a15c4559b69805bc69bf4ad9e16bbf6480d52, 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < f8970ee9e315c9e2258ae8914d5fb32b1039d2f6, 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < 7efb51a5893b22003a679d088b7794be2ccd6c32, 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < 5aae80dcec0748b4ed61daace2ad8b12082261f2, 88574332451380f4b51f6ca88ab9810e714bfb9b ≤ v < fce20289dd622cc7ab78d72c8a979a9f8b7cb10e, 5.11 | a3ffced8be1555f283680065c3b87a19f5ab9097, 4ce407055ae9d37f46a3c6f05eb27198b354d287, d52a15c4559b69805bc69bf4ad9e16bbf6480d52, f8970ee9e315c9e2258ae8914d5fb32b1039d2f6, 7efb51a5893b22003a679d088b7794be2ccd6c32, 5aae80dcec0748b4ed61daace2ad8b12082261f2, fce20289dd622cc7ab78d72c8a979a9f8b7cb10e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.