This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-41434 →

DEBIAN-CVE-2026-41434

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone...

Original description

The description as published by the source.

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS#11 TA. Version 4.11.0 contains a patch. No known workarounds are available.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:13 optee-os

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org