{"id":"AZL-102314","summary":"CVE-2026-93155 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: keembay - Fix AEAD unregister count in error path\n\nregister_aes_algs() registers the AEAD algorithms before registering the\nskcipher algorithms.  If skcipher registration fails, the function unwinds\nthe earlier AEAD registration with crypto_engine_unregister_aeads(), but it\npasses ARRAY_SIZE(algs), which is the skcipher table size.\n\nUse ARRAY_SIZE(algs_aead) for the AEAD unwind path so the unregister helper\niterates over the same table that was registered.  Also clarify the nearby\ncomment: the crypto registration helpers clean up algorithms registered\nwithin the same call, while this function must still unwind earlier\nsuccessful registration steps.","modified":"2026-09-18T14:17:50.051745707Z","published":"2026-09-17T17:18:10Z","upstream":["CVE-2026-93155"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93155"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-102314.json"}}],"schema_version":"1.9.0"}