CVE-2026-41515 Details
Description
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses non-constant-time `memcmp()` for label hash verification and has multiple distinguishable error paths. This creates a Manger-style padding oracle that allows an attacker to recover RSA-OAEP plaintext with approximately 1000-2000 adaptive chosen ciphertext queries. Version 4.11.0 contains a patch. As a workaround, disable the NXP CAAM RSA driver with `CFG_CRYPTO_DRV_RSA=n`.
A padding oracle vulnerability has been identified in the OP-TEE RSA-OAEP decryption implementation within the NXP CAAM crypto driver, affecting OP-TEE versions 3.9.0 prior to 4.11.0. The vulnerability arises because the label hash verification uses a non-constant-time memory comparison, creating a timing side-channel. This allows an attacker to exploit the padding scheme and recover plaintext from RSA-OAEP ciphertext by making approximately 1000-2000 adaptive chosen ciphertext queries. The issue is specific to NXP i.MX SoCs with the CAAM accelerator.
OP-TEE version 4.11.0 and later includes a patch for this vulnerability. As a workaround, the NXP CAAM RSA driver can be disabled.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 7, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/OP-TEE/optee_os/security/advisories/GHSA-5q45-58r5-cq4g | [email protected] | MitigationVendor AdvisoryPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-208 | Observable Timing Discrepancy | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| trustedfirmware op-tee | >= 3.9.0, <= 4.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 7, 2026 | Initial Analysis | [email protected] |
| Jul 7, 2026 | CVE Modified | CISA-ADP |
| Jul 6, 2026 | New CVE Received | [email protected] |