In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the private key stored in the device. However, the public key is cached only after atmel_ecdh_set_secret() successfully generated that private key for the current tfm. atmel_ecdh_generate_public_key() already rejects requests when no public key is cached. Add the same check to atmel_ecdh_compute_shared_secret() to prevent the device from using a private key that was not generated for the current tfm.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 2
- StatusReceived → PublishedNVD modified 2026-10-19 09:06
- First seenunscoredNVD modified 2026-10-19 10:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 8
- https://git.kernel.org/stable/c/2b40bab362d2b598f34e5ccd4694cedc3c2553d4
- https://git.kernel.org/stable/c/33241f198287960bba5fc2251400896762650bfa
- https://git.kernel.org/stable/c/3ea8b780d68f02fe235c5051ce8ac4b4940b9259
- https://git.kernel.org/stable/c/5e33791dfcc6459e402a524669093cd953d5b2df
- https://git.kernel.org/stable/c/6457162f74f45284ade2da644a4f0c54758ac0a6
- https://git.kernel.org/stable/c/add28e9988902d29ea93f4869280b4a16a049ea5
- https://git.kernel.org/stable/c/e64d6f1aae8c837cb3f0446bf44108226d7370f4
- https://git.kernel.org/stable/c/f240f9b588f4e2de89822adebf560a96b5d263ed