In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use… (CVE-2026-64316)
A vulnerability in the Linux kernel's crypto subsystem (caam) involved the potential leakage of sensitive key material through debug output when CONFIG_DYNAMIC_DEBUG is enabled. The issue was addressed by using print_hex_dump_devel() to guard key hex dumps in *_setkey() and gen_split_key() functions, preventing secrets from being exposed at runtime.
AI Analysis
Technical Summary
The Linux kernel crypto: caam module had a vulnerability where sensitive cryptographic key material could be leaked via debug output if CONFIG_DYNAMIC_DEBUG was enabled. This occurred because key hex dumps were not properly guarded, allowing potential exposure of secrets during runtime. The vulnerability was resolved by changing the code to use print_hex_dump_devel(), which respects dynamic debug settings and prevents unintended key material disclosure.
Potential Impact
Sensitive cryptographic keys could be exposed in debug output when dynamic debugging is enabled, potentially compromising cryptographic operations relying on these keys. There is no indication of known exploits in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code to use print_hex_dump_devel() for key dumps, which guards against leaking secrets when CONFIG_DYNAMIC_DEBUG is enabled. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or source repositories for the fixed version and apply the update accordingly.
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use… (CVE-2026-64316)
Description
A vulnerability in the Linux kernel's crypto subsystem (caam) involved the potential leakage of sensitive key material through debug output when CONFIG_DYNAMIC_DEBUG is enabled. The issue was addressed by using print_hex_dump_devel() to guard key hex dumps in *_setkey() and gen_split_key() functions, preventing secrets from being exposed at runtime.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel crypto: caam module had a vulnerability where sensitive cryptographic key material could be leaked via debug output if CONFIG_DYNAMIC_DEBUG was enabled. This occurred because key hex dumps were not properly guarded, allowing potential exposure of secrets during runtime. The vulnerability was resolved by changing the code to use print_hex_dump_devel(), which respects dynamic debug settings and prevents unintended key material disclosure.
Potential Impact
Sensitive cryptographic keys could be exposed in debug output when dynamic debugging is enabled, potentially compromising cryptographic operations relying on these keys. There is no indication of known exploits in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code to use print_hex_dump_devel() for key dumps, which guards against leaking secrets when CONFIG_DYNAMIC_DEBUG is enabled. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or source repositories for the fixed version and apply the update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gf2r-w27p-ph9q
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64316"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420d9c2644c7f80859d6
Added to database: 07/25/2026, 23:09:01 UTC
Last enriched: 07/25/2026, 23:35:17 UTC
Last updated: 07/26/2026, 03:42:34 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.