CVE-2022-49260
A flaw in the Linux kernel’s HiSilicon crypto driver can cause the operating system to crash. The issue is fixed in newer kernel releases. Users should update their kernel to remove the risk.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
All Linux systems running kernel versions that contain the vulnerable HiSilicon crypto driver, typically older kernels before the patch was applied.
Real-world impact
An attacker could trigger a kernel panic, causing the system to reboot or become unusable, which could be used to disrupt services or facilitate further attacks.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability allows an attacker to completely compromise confidentiality, integrity, and availability with no authentication or user interaction required.
What to do about it
- 01Update the Linux kernel to a version that includes the fix for CVE-2022-49260.
NVD-referenced vendor advisory
Timeline
- Feb 26, 2025 · Feb 26, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.