CVE-2026-46077 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-tdes - fix DMA sync direction Before DMA output is consumed by the CPU, ->dma_addr_out must be synced with dma_sync_single_for_cpu() instead of dma_sync_single_for_device(). Using the wrong direction can return stale cache data on non-coherent platforms.
A vulnerability in the Linux kernel's Atmel TDES cryptographic driver has been addressed. The issue arose because the Direct Memory Access (DMA) output was not properly synchronized before being processed by the CPU. The synchronization should have been done using 'dma_sync_single_for_cpu()' instead of 'dma_sync_single_for_device()'. This mistake could lead to the CPU receiving outdated cache data on platforms without coherent memory access.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/12a0adfe498cd5d87e6365d7ca5f6b3eed79e523 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5281e6e2302362f6b75b70cbfe4098d2a25dafd9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/863d11b3927703ad95077c81a8a6489c5c7872f7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b5f5df801d161ba244f391519cbff2f4e5c6edc2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b9b28f3881dd514e74f98ae04e79a635022a4804 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c0f3002c02a3a83250e25582ffbe8df7eb78a8bd | kernel.org | Patch |
| https://git.kernel.org/stable/c/c8a9a647532f5c2a04180352693215e24e9dba03 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ce3224678acb8c0b3473daa7d7dbffc998c6951a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.6, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.86 >= 6.13, < 6.18.27 >= 6.19, < 7.0.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 24, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 1, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |