[SRU][Q][PATCH 0/1] CVE-2026-53055
Cengiz Can
cengiz.can at canonical.com
Thu Jul 16 23:56:47 UTC 2026
https://ubuntu.com/security/CVE-2026-53055
[ Impact ]
A use-after-free vulnerability exists in the HiSilicon SEC2 crypto driver.
During packet transmission under heavy system load, the hardware may complete
processing a packet and free the request memory (req) before the transmission
function finishes. If the software subsequently accesses this freed req, a use-
after-free error occurs, which can lead to memory corruption or a system crash.
[ Fix ]
questing: clean cherry-pick
[ Test Plan ]
Boot tested.
[ Where Problems Could Occur ]
A regression in this fix would affect the HiSilicon SEC2 crypto accelerator
driver, potentially causing incorrect crypto operation results, request
handling errors, or instability on systems using this hardware for hardware-
accelerated cryptography.
More information about the kernel-team
mailing list