Linux Kernel AEAD Software Fallback Vulnerability in Hisilicon SEC Engine

A vulnerability in the Linux kernel's cryptographic subsystem, specifically within the Hisilicon SEC engine, has been addressed. The issue stemmed from improper handling of the subrequest pointer, which led to misuse of private context memory. This flaw caused occasional operating system panics by setting the page size to 64K. The vulnerability arose during the AEAD (Authenticated Encryption with Associated Data) software fallback process.

Impact

Exploitation of this vulnerability could lead to a kernel panic, causing a denial of service by abruptly terminating system processes and potentially disrupting system stability.