CVE-2026-46291

crypto: caam - guard HMAC key hex dumps in hash_digest_key

State: Published
Severity: Not scored
Published: Jun 8, 2026
Updated: Jun 19, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - guard HMAC key hex dumps in hash_digest_key

Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in hash_digest_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before e8e72fdf47bd5ef7abe642b034c6178a61a8580aAffected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before cd849c07b8d706425e60a4dfcef54b7b67c967ceAffected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before a9207798fe619cbc85c8744a9b9e2af1db2b6e1aAffected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before 2adbfca7452eeac45117b8e803288a2767f7075fAffected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before c7e52fe3f7901ccb9cd29b3f7c683d809ba87e48Affected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before 5cffe3c136891aa4d579bf5c079a68f7cb371b0cAffected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before b8f12d9b00c1950779e5679b9c13908584682bb6Affected 045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before 177730a273b18e195263ed953853273e901b5064Affected
LinuxLinux	3.6Affected before 3.6Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.88 through 6.12.Not affected 6.18.30 through 6.18.Not affected 7.0.7 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before e8e72fdf47bd5ef7abe642b034c6178a61a8580aAffected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before cd849c07b8d706425e60a4dfcef54b7b67c967ceAffected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before a9207798fe619cbc85c8744a9b9e2af1db2b6e1aAffected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before 2adbfca7452eeac45117b8e803288a2767f7075fAffected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before c7e52fe3f7901ccb9cd29b3f7c683d809ba87e48Affected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before 5cffe3c136891aa4d579bf5c079a68f7cb371b0cAffected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before b8f12d9b00c1950779e5679b9c13908584682bb6Affected
045e36780f11523e26d1e4a8c78bdc57f4003bd0 to before 177730a273b18e195263ed953853273e901b5064Affected

LinuxLinux

3.6Affected
before 3.6Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.88 through 6.12.*Not affected
6.18.30 through 6.18.*Not affected
7.0.7 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.