Vulnerability in Kernel: crypto: octeontx2 - CN10K CPT to RNM workaround

Kernel Updated 02 Oct 2025

Summary

24/04/2022
N/A
No i
Unrated
Not published

GSD-2022-1001163: crypto: octeontx2 - CN10K CPT to RNM workaround. Affects Kernel versions < c756b8a20176f5537b2604c9d917827f1a3834bc. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Your last release was probably never penetration tested Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the security and stability of the system. The crypto subsystem within the Kernel handles cryptographic operations and provides encryption and decryption capabilities.

The vulnerability in question affects the octeontx2 driver in the Kernel. The octeontx2 driver is responsible for supporting the Cavium OCTEON TX2 cryptographic hardware accelerator. This vulnerability specifically impacts the CN10K CPT to RNM workaround in the octeontx2 driver.

Vulnerability Detail

The vulnerability arises from a flaw in the CN10K CPT to RNM workaround implemented in the octeontx2 driver. While the exact impact and attack plausibility have not been proven, this vulnerability has the potential to be exploited by malicious actors to compromise the security and integrity of the system. The specific technical details of the vulnerability are not provided in the given information.

How To Fix

No fixed version is published for this vulnerability.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

No specific workaround is mentioned in the provided information. It is advised to follow the recommended fix and update the Kernel to the patched version.

Conclusion

The vulnerability in the Kernel's octeontx2 driver, specifically related to the CN10K CPT to RNM workaround, has the potential to be exploited by malicious actors. It is crucial to update the Kernel to the fixed version (v5.17.2 or later) to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →

Share this vulnerability

FAQ

The Kernel is a critical component of the Linux operating system that manages system resources, facilitates communication between software components, and ensures system security and stability.

The octeontx2 driver is responsible for supporting the Cavium OCTEON TX2 cryptographic hardware accelerator in the Linux Kernel.

The CN10K CPT to RNM workaround is a specific implementation in the octeontx2 driver that addresses a known issue related to the Cavium OCTEON TX2 cryptographic hardware accelerator.

The exact impact and attack plausibility of this vulnerability have not been proven. However, if exploited, it could potentially compromise the security and integrity of the system.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.2 or any subsequent version that includes the fix.

Related vulnerabilities

Recent vulnerabilities recorded for Kernel.

How To Fix

No fixed version is published for this vulnerability.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback