Search: CVE-2026-43330

A vulnerability in the Linux kernel's crypto CAAM module allows an overflow when processing long HMAC keys. The issue arises because the memory allocated for copying keys longer than the block size is not properly aligned to DMA cache boundaries, causing potential memory corruption. This flaw is due to the use of kmemdup which reads beyond the source buffer length. The vulnerability has been fixed by replacing kmemdup with kmalloc followed by memcpy to correctly handle memory allocation and copying.