CVE-2026-64312

crypto: pcrypt - restore callback for non-parallel fallback

State: Published
Severity: 7.5 High
Published: Jul 25, 2026
Updated: Oct 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: pcrypt - restore callback for non-parallel fallback

pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly.

That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata.

Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

CWE-662 Improper Synchronization

Affected Products

Product	Versions
LinuxLinux	a92ccd3618e42333ac6f150ecdac14dca298bc7a to before 81ce16d938db9b88cdc231522c0358395ae8c6b5Affected 96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca to before 3920c5f6edc341729d20d0507e466c6d3b11f372Affected 92834692a539b5b7f409e467a14667d64713b732 to before ae93c5b3e2a2968b56d772ca1d06615927b7cc36Affected 5edae7a9a35606017ee6e05911c290acee9fee5a to before 82789a44415e3e31168229421b138278dfb16412Affected 7ddab756f2de5b7b43c122ebebdf37f400fb2b6f to before 4711ca06bd169a2cbc9cc59a6de2ed512c41a880Affected 662f2f13e66d3883b9238b0b96b17886179e60e2 to before c4bd2f4c35b0e15b6040c2f7e7e7986780c066cfAffected 662f2f13e66d3883b9238b0b96b17886179e60e2 to before 83fa1397d5853de1e27dd52ec44b068ff358ca18Affected 662f2f13e66d3883b9238b0b96b17886179e60e2 to before ed459fe319376e876de433d12b6c6772e612ca36Affected dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6Affected fca8aed12218f96b38e374ff264d78ea1fbd23ccAffected a8e0074ffb38c9a5964a221bb998034d016c93a2Affected 5.10.231 to before 5.10.261Affected 5.15.174 to before 5.15.212Affected 6.1.120 to before 6.1.178Affected 6.6.64 to before 6.6.145Affected 6.12.2 to before 6.12.96Affected 4.19.325 to before 4.20Affected 5.4.287 to before 5.5Affected 6.11.11 to before 6.12Affected
LinuxLinux	6.13Affected before 6.13Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

a92ccd3618e42333ac6f150ecdac14dca298bc7a to before 81ce16d938db9b88cdc231522c0358395ae8c6b5Affected
96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca to before 3920c5f6edc341729d20d0507e466c6d3b11f372Affected
92834692a539b5b7f409e467a14667d64713b732 to before ae93c5b3e2a2968b56d772ca1d06615927b7cc36Affected
5edae7a9a35606017ee6e05911c290acee9fee5a to before 82789a44415e3e31168229421b138278dfb16412Affected
7ddab756f2de5b7b43c122ebebdf37f400fb2b6f to before 4711ca06bd169a2cbc9cc59a6de2ed512c41a880Affected
662f2f13e66d3883b9238b0b96b17886179e60e2 to before c4bd2f4c35b0e15b6040c2f7e7e7986780c066cfAffected
662f2f13e66d3883b9238b0b96b17886179e60e2 to before 83fa1397d5853de1e27dd52ec44b068ff358ca18Affected
662f2f13e66d3883b9238b0b96b17886179e60e2 to before ed459fe319376e876de433d12b6c6772e612ca36Affected
dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6Affected
fca8aed12218f96b38e374ff264d78ea1fbd23ccAffected
a8e0074ffb38c9a5964a221bb998034d016c93a2Affected
5.10.231 to before 5.10.261Affected
5.15.174 to before 5.15.212Affected
6.1.120 to before 6.1.178Affected
6.6.64 to before 6.6.145Affected
6.12.2 to before 6.12.96Affected
4.19.325 to before 4.20Affected
5.4.287 to before 5.5Affected
6.11.11 to before 6.12Affected

LinuxLinux

6.13Affected
before 6.13Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.