The Linux kernel contained a vulnerability in the crypto CAAM component where sensitive cryptographic key material could be leaked at runtime if CONFIG_DYNAMIC_DEBUG was enabled. This was due to unguarded hex dumps of keys in *_setkey() functions. The vulnerability was resolved by modifying the code to use print_hex_dump_devel(), which conditionally outputs debug information only when dynamic debugging is enabled, thereby preventing unintended key disclosure.

If exploited, this vulnerability could lead to the exposure of sensitive cryptographic keys in memory dumps or debug output when dynamic debugging is active. This could compromise the confidentiality of cryptographic operations relying on these keys. However, exploitation requires CONFIG_DYNAMIC_DEBUG to be enabled, which is not typical in production environments.

A fix has been implemented in the Linux kernel source code to use print_hex_dump_devel() for key dumps, mitigating the risk of key leakage when CONFIG_DYNAMIC_DEBUG is enabled. Users should update their Linux kernel to a version that includes this fix. Since this is a source code level fix, applying the updated kernel from the official vendor or distribution is the recommended remediation. Patch status is not explicitly confirmed here; check the vendor advisory or kernel release notes for the exact fixed versions and update accordingly.