APPLIED[N:hwe-6.17]: [SRU][Q][PATCH 0/1] CVE-2026-53055

[Edoardo Canepa]

Applied to n:linux/hwe-6.17-next. Thanks.

On 7/17/26 01:56, Cengiz Can via kernel-team wrote:
> https://ubuntu.com/security/CVE-2026-53055
>
> [ Impact ]
>
> A use-after-free vulnerability exists in the HiSilicon SEC2 crypto driver.
> During packet transmission under heavy system load, the hardware may complete
> processing a packet and free the request memory (req) before the transmission
> function finishes. If the software subsequently accesses this freed req, a use-
> after-free error occurs, which can lead to memory corruption or a system crash.
>
> [ Fix ]
>
> questing: clean cherry-pick
>
> [ Test Plan ]
>
> Boot tested.
>
> [ Where Problems Could Occur ]
>
> A regression in this fix would affect the HiSilicon SEC2 crypto accelerator
> driver, potentially causing incorrect crypto operation results, request
> handling errors, or instability on systems using this hardware for hardware-
> accelerated cryptography.
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260730/ee7fb00c/attachment.sig>