In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use… (CVE-2026-64316)
Source GCVE Database
No CVSS score published yet
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEs
What to do
AI-suggested
A fix has been implemented in the Linux kernel source code to use print_hex_dump_devel() for key dumps, which guards against leaking secrets when CONFIG_DYNAMIC_DEBUG is enabled. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or source repositories for the fixed version and apply the update accordingly.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() and gen_split_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.
References
- nvd.nist.gov/vuln/detail/CVE-2026-64316 (opens in a new tab)
- git.kernel.org/stable/c/3f57657b6ea23f933371f2c2846322f441773cee (opens in a new tab)
- git.kernel.org/stable/c/45c0e3615e5bca5f1fc93357af8d19975c092d4f (opens in a new tab)
- git.kernel.org/stable/c/6f7b8e0321f3a8fbbd267d2ac15c671ab59e919e (opens in a new tab)
- git.kernel.org/stable/c/8b56ba10105ca34a4b75f7e33d41d96a63815591 (opens in a new tab)
- git.kernel.org/stable/c/8cf5fb0503129e53052fe29302379cf83891d0fb (opens in a new tab)
- git.kernel.org/stable/c/9a53dc0a0ae0486e164e5af3de5f99ab42c5a23e (opens in a new tab)
- git.kernel.org/stable/c/cea7302d5d05df74cfb4107897b1ca34163c06b9 (opens in a new tab)
- git.kernel.org/stable/c/ebd37eef6e4f435e18829c0c0c9ba3a6618cb2dd (opens in a new tab)