CVE-2026-43493

crypto: pcrypt - Fix handling of MAY_BACKLOG requests

State: Published
Severity: 9.8 Critical
Published: May 19, 2026
Updated: Oct 19, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: pcrypt - Fix handling of MAY_BACKLOG requests

MAY_BACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-390 Detection of Error Condition Without Action

Affected Products

Product	Versions
LinuxLinux	5a1436beec5744029f3ac90b6fe71a698dcd6155 to before ae7e95638d956d556d74b9abb9e780d3bd3dcd9eAffected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 1d7f07df450bac3301938fbc4251f2611be4084eAffected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 76641449b28979ebd6c02e9598367e119e385236Affected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 9f1cbca178c03188e201ed175251372149bb25f2Affected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before eb34e243df57e32f4c08fa191f3602ea19076276Affected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 77d55bc8675ee851ed639dc9be77325a8024cf67Affected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 46271895ddfb1ba41f89f7e0dffbe9c2bcf7380aAffected 5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 915b692e6cb723aac658c25eb82c58fd81235110Affected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.86 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

5a1436beec5744029f3ac90b6fe71a698dcd6155 to before ae7e95638d956d556d74b9abb9e780d3bd3dcd9eAffected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 1d7f07df450bac3301938fbc4251f2611be4084eAffected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 76641449b28979ebd6c02e9598367e119e385236Affected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 9f1cbca178c03188e201ed175251372149bb25f2Affected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before eb34e243df57e32f4c08fa191f3602ea19076276Affected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 77d55bc8675ee851ed639dc9be77325a8024cf67Affected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 46271895ddfb1ba41f89f7e0dffbe9c2bcf7380aAffected
5a1436beec5744029f3ac90b6fe71a698dcd6155 to before 915b692e6cb723aac658c25eb82c58fd81235110Affected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.86 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.