CVE-2026-43336

lib/crypto: chacha: Zeroize permuted_state before it leaves scope

State: Published
Severity: 7.5 High
Published: May 8, 2026
Updated: Aug 5, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

lib/crypto: chacha: Zeroize permuted_state before it leaves scope

Since the ChaCha permutation is invertible, the local variable 'permuted_state' is sufficient to compute the original 'state', and thus the key, even after the permutation has been done.

While the kernel is quite inconsistent about zeroizing secrets on the stack (and some prominent userspace crypto libraries don't bother at all since it's not guaranteed to work anyway), the kernel does try to do it as a best practice, especially in cases involving the RNG.

Thus, explicitly zeroize 'permuted_state' before it goes out of scope.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before e90ee961af515a484f091678ce58a4c3f7b73b02Affected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before b416a4245f04a450c67a13e6d96056c37c5b33feAffected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before bd62d9b44464a6c20a34a74068e7a784d0afa04aAffected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 066c760acead1fb743bae294dbd89f479ae43b9bAffected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 1d761e5a7340c46479fb2399598f331e4fe2c633Affected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 1933249263c3a98df79992f61a566476e4163bccAffected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 91999af43ca2125e3b2c18fcfc02912ada02efc3Affected c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before e5046823f8fa3677341b541a25af2fcb99a5b1e0Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.169 through 6.1.Not affected 6.6.135 through 6.6.Not affected 6.12.82 through 6.12.Not affected 6.18.22 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before e90ee961af515a484f091678ce58a4c3f7b73b02Affected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before b416a4245f04a450c67a13e6d96056c37c5b33feAffected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before bd62d9b44464a6c20a34a74068e7a784d0afa04aAffected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 066c760acead1fb743bae294dbd89f479ae43b9bAffected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 1d761e5a7340c46479fb2399598f331e4fe2c633Affected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 1933249263c3a98df79992f61a566476e4163bccAffected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before 91999af43ca2125e3b2c18fcfc02912ada02efc3Affected
c08d0e647305c3f8f640010a56c9e4bafb9488d3 to before e5046823f8fa3677341b541a25af2fcb99a5b1e0Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.169 through 6.1.*Not affected
6.6.135 through 6.6.*Not affected
6.12.82 through 6.12.*Not affected
6.18.22 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.