Threats tagged 'ghsa-7669-mcjm-pwg9'

CVE-2026-43330 is a high-severity vulnerability in the Linux kernel's crypto CAAM driver. It involves an overflow issue when handling HMAC keys longer than the block size. The vulnerability arises because the memory allocated for copying the key is not properly aligned to DMA cache boundaries, causing potential memory corruption. The flaw is due to the use of kmemdup which reads beyond the source buffer length, leading to overflow. The fix involves replacing kmemdup with kmalloc followed by memcpy to correctly handle memory allocation and copying.