CVE-2026-64312
Received Received - Intake

Linux Kernel pcrypt Parallel Fallback Callback Issue

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64312
EUVD
EUVD-2026-49024

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the pcrypt module's fallback mechanism for AEAD (Authenticated Encryption with Associated Data) requests. When padata_do_parallel() returns -EBUSY, pcrypt attempts to process the request directly without removing a previously set completion callback. This can lead to an asynchronous completion running pcrypt_aead_done() even though the request was never properly enrolled in padata.

Detection Guidance

This vulnerability is specific to the Linux kernel's pcrypt module and does not have direct network or system detection commands. It requires kernel code inspection or monitoring for crashes related to AEAD operations. Check kernel logs for errors in crypto or padata subsystems.

Impact Analysis

This vulnerability could cause unexpected behavior in cryptographic operations, potentially leading to data corruption or security issues if the callback is executed incorrectly. Systems relying on pcrypt for parallel cryptographic processing may experience crashes or incorrect encryption/decryption results.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Monitor vendor advisories for updates to your distribution. If you cannot patch immediately, disable pcrypt or restrict AEAD operations until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64312. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart