{"cve":"CVE-2026-93158","nvd":{"published":"2026-09-17T17:18:11.143","modified":"2026-10-19T10:17:06.013","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sa2ul - stop probe if context pool creation fails\n\nsa_ul_probe() calls sa_init_mem() to create the DMA pool used for\nsecurity context buffers, but ignores its return value. If pool creation\nfails, probe still continues with DMA setup, algorithm registration and\nchild population even though later request setup depends on that pool.\n\nStop probing when sa_init_mem() fails, and route that failure to the PM\ncleanup path without attempting to destroy an uncreated DMA pool.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/04c46784ec249cac995e31f0691397b82bdaa5fd","https://git.kernel.org/stable/c/304dcd26bfc3ce6771c2bd3b7c0299dcfd5f4e06","https://git.kernel.org/stable/c/91ded4742fcde6ad415c4d8a20e5ea0dcdf4f73e","https://git.kernel.org/stable/c/9907426b438e4dbc8c45138bd440ad6d732d80b7","https://git.kernel.org/stable/c/9a692a6a2b47328a36c8d80c7fbf81da16b6d6b1"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:55:23.253742848+00:00"},"epss":{"cve":"CVE-2026-93158","score":0.0022,"percentile":0.12347,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}