CVE-2026-64316

Awaiting Analysis Awaiting Analysis - Queue

crypto: caam key material leak via debug output

Publication date: 2026-07-25

Last updated on: 2026-08-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() and gen_split_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-25

Last Modified

2026-08-11

Generated

2026-08-14

AI Q&A

2026-07-25

EPSS Evaluated

2026-08-13

NVD

CVE-2026-64316

EUVD

EUVD-2026-49028

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of sensitive key material during debugging. When CONFIG_DYNAMIC_DEBUG is enabled, the system may leak cryptographic keys through debug output. The fix replaces unsafe hex dump functions with print_hex_dump_devel() to prevent this exposure.

Detection Guidance

This vulnerability involves potential leakage of sensitive key material in the Linux kernel's crypto subsystem. Detection would require checking kernel logs for unauthorized key dumps when CONFIG_DYNAMIC_DEBUG is enabled. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow attackers to retrieve cryptographic keys used for encryption or authentication. This might enable decryption of sensitive data, unauthorized system access, or bypassing security controls. Systems using the affected Linux kernel components are at risk.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations requiring protection of sensitive data. Exposure of cryptographic keys may violate encryption requirements, data integrity, and confidentiality mandates, potentially resulting in legal penalties or loss of certification.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Disable CONFIG_DYNAMIC_DEBUG if not required. Monitor kernel logs for suspicious key material dumps.

Hi! I’m here to help you understand CVE-2026-64316. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70