CVE-2026-80882: 
Linux Debian vulnerability analysis and mitigation

CVE-2026-80882 is a memory error-handling flaw in the Linux kernel's Tegra CCM cryptographic driver. Specifically, the tegra_ccm_do_one_req function fails to return the ENOMEM error code when an input buffer allocation fails, potentially leaving the kernel in an incorrect error state. The vulnerability was published on September 4, 2026, and affects Linux kernel versions 6.12.91–6.12.96, 6.13.11–6.13.x, and 6.14.2–6.14.x. A CVSS base score has not yet been formally assigned; Feedly estimates the severity as Medium (Github Advisory).

The root cause is improper error handling (related to CWE-252: Unchecked Return Value / missing error propagation) in the tegra_ccm_do_one_req function within the Linux kernel's crypto/tegra subsystem. When a memory allocation for the CCM input buffer fails, the function does not set the return value to ENOMEM, meaning the caller receives an uninitialized or incorrect error code. This is a local vulnerability requiring the ability to invoke CCM-mode cryptographic operations on Tegra hardware. Exploitation requires local access and the ability to trigger memory pressure conditions that cause allocation failures (Github Advisory).

A local user with access to CCM cryptographic operations on affected Tegra hardware could trigger input buffer allocation failures that are silently misreported, potentially causing the kernel to continue execution with uninitialized memory or incorrect error-handling logic. This could lead to unpredictable kernel behavior, data corruption in cryptographic operations, or in edge cases, kernel instability. The impact is limited to systems running affected Linux kernel versions on NVIDIA Tegra hardware (Github Advisory).

There is no known public proof-of-concept exploit for CVE-2026-80882, and no evidence of in-the-wild exploitation has been observed. The EPSS score is 0.0, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation is constrained to local users with access to Tegra CCM cryptographic operations, significantly limiting the attack surface (Github Advisory).

Patches have been committed to the Linux kernel stable tree. Fixed commits include 5cf0f624191c (for one branch), 4f3c17f14cf9, 20360e125a8d, and 690a5f9e5c97. Fixed stable releases include Linux 6.12.97 and later, 6.14.x (after 6.14.2), and 6.15 and above; versions 6.18.40, 7.1.5, and 7.2 are also confirmed unaffected. As a workaround where patching cannot be immediately deployed, restrict access to CCM-mode cryptographic operations on affected Tegra systems to trusted users only (Github Advisory).