CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps
Greg Kroah-Hartman <[email protected]> Sat, 25 Jul 2026 10:48:52 +0200
| Newsgroups | org.kernel.vger.linux-cve-announce |
|---|---|
| Message-ID | <2026072510-CVE-2026-64315-6255@gregkh> |
From: Greg Kroah-Hartman <[email protected]> Description =========== In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled. The Linux kernel CVE team has assigned CVE-2026-64315 to this issue. Affected and fixed versions =========================== Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 5.10.261 with commit 1ec775f6a124cce6278ae58b7d1c78a3bc6eef23 Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 5.15.212 with commit bcf3cf74dfb6981e18b22cbf561f859a0f7faa26 Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 6.1.178 with commit 6407dc85d0a4306681cf6c9be7f05e05dcb67a37 Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 6.6.145 with commit c8cfe11e48b2a4646fa662fcaa92e14810a28d46 Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 6.12.96 with commit 8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7 Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 6.18.39 with commit d0b8cafd529b4ec759190c6081f7a76efb563a8f Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 7.1.4 with commit 59057f5d4e9a195c6dd61695ad3bc4481ddf4f14 Issue introduced in 4.20 with commit 8d818c1055013d355d36188f21c7535687374f6c and fixed in 7.2-rc1 with commit 8005dc808bcce7d6cc2ae015a3cde1683bee602d Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-64315 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/crypto/caam/caamalg_qi2.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/1ec775f6a124cce6278ae58b7d1c78a3bc6eef23 https://git.kernel.org/stable/c/bcf3cf74dfb6981e18b22cbf561f859a0f7faa26 https://git.kernel.org/stable/c/6407dc85d0a4306681cf6c9be7f05e05dcb67a37 https://git.kernel.org/stable/c/c8cfe11e48b2a4646fa662fcaa92e14810a28d46 https://git.kernel.org/stable/c/8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7 https://git.kernel.org/stable/c/d0b8cafd529b4ec759190c6081f7a76efb563a8f https://git.kernel.org/stable/c/59057f5d4e9a195c6dd61695ad3bc4481ddf4f14 https://git.kernel.org/stable/c/8005dc808bcce7d6cc2ae015a3cde1683bee602d