CVE-2026-53055 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - prevent req used-after-free for sec During packet transmission, if the system is under heavy load, the hardware might complete processing the packet and free the request memory (req) before the transmission function finishes. If the software subsequently accesses this req, a use-after-free error will occur. The qp_ctx memory exists throughout the packet sending process, so replace the req with the qp_ctx.
A use-after-free vulnerability has been identified in the Linux kernel's Hisilicon crypto driver, specifically in the sec2 component. This issue arises during packet transmission under heavy system load, where the hardware may finish processing a packet and free the associated request memory before the transmission function has completed. If the software then tries to access this freed memory, a use-after-free error occurs. The vulnerability affects the request memory (req) used in the packet sending process. To address this, the qp_ctx memory, which remains available throughout the transmission, is proposed as a replacement for the req.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. Instructions for downloading the updated kernel can be found on the Linux Kernel Archives.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/67b53a660e6bf0da2fa8d8872e897a14d8059eaf | kernel.org | Patch |
| https://git.kernel.org/stable/c/ad73563f3a1edbfddf2724136c6a15826b354e18 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b375c3c7209cc59e40e97998aa9bc768369cca0e | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.17, < 6.18.33 >= 6.19, < 7.0.10 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 24, 2026 | New CVE Received | kernel.org |