Riskcovery

CVE-2026-31543

crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

State
Published
Severity
Not scored
Published
Apr 24, 2026
Updated
May 11, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

When debug logging is enabled, read_key_from_user_keying() logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 to before 4897bd307ba8757c31a3325ba6730961be606016Affected
  • 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 to before ed8d91f469845d62d44c565a55d2ab1767969357Affected
  • 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 to before 36f46b0e36892eba08978eef7502ff3c94ddba77Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.20 through 6.18.*Not affected
  • 6.19.10 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.