ReviewHigh

CVE-2026-80565

Linux

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedly calls the same ops->unregister_algs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.08.27
PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedly calls the same ops->unregister_algs() from the failed registration. Use the loop index to unregister the previously registered algorithms instead.

Affected product and versions

Product
Linux
Affected versions
>= 9e403fea74ecbe6b4a4321f13bd4bc929382908d < dbca8b798caf47fb2799a26dd09c9ad66305883d, >= f52f00efd8c0088992ac07ef46af6096e4f0e52e < fef187c6194d67395182d58169dd14ba631f1b41, >= 5d5b673b4dd260226b2202f66a920566c27051f3 < 1ece8e16c085e8cd60ecbdb641269aaa53d31da4, >= e914b2f795b6995bb0e7db45caa4a912dca09e65 < de52c713d21806b93b00a6074056b57aec4f8919, >= 76e6d50fa5a2fb466edcc8b513d7aad372312c2a < c7dc487aade12c692add3221673c9bdf32dc24f5, >= e80cf84b608725303113d6fe98bb727bf7b7a40d < a134e4b8102c077286818ee112b9f925db613d4c, >= e80cf84b608725303113d6fe98bb727bf7b7a40d < 4e88b4fda48282f3fd504b4d4f5d2d4f996b76ce, >= e80cf84b608725303113d6fe98bb727bf7b7a40d < 9c75402286409f5e1a75e4a445555c84066f89db, >= 8c735ef894dfcca8d0a1cc554f83a82a70fd5b76, >= 4007883dc7df1dbaeb461b850e0b1b27c057affc, >= 5.10.235 < 5.10.266, >= 5.15.179 < 5.15.217, >= 6.1.129 < 6.1.184, >= 6.6.78 < 6.6.153, >= 6.12.14 < 6.12.105, >= 5.4.291 < 5.5, >= 6.13.3 < 6.14, >= 6.14
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available