CVE-2026-64315

crypto: caam - use print_hex_dump_devel to guard key hex dumps

State: Published
Severity: 7.0 High
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - use print_hex_dump_devel to guard key hex dumps

Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8d818c1055013d355d36188f21c7535687374f6c to before 1ec775f6a124cce6278ae58b7d1c78a3bc6eef23Affected 8d818c1055013d355d36188f21c7535687374f6c to before bcf3cf74dfb6981e18b22cbf561f859a0f7faa26Affected 8d818c1055013d355d36188f21c7535687374f6c to before 6407dc85d0a4306681cf6c9be7f05e05dcb67a37Affected 8d818c1055013d355d36188f21c7535687374f6c to before c8cfe11e48b2a4646fa662fcaa92e14810a28d46Affected 8d818c1055013d355d36188f21c7535687374f6c to before 8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7Affected 8d818c1055013d355d36188f21c7535687374f6c to before d0b8cafd529b4ec759190c6081f7a76efb563a8fAffected 8d818c1055013d355d36188f21c7535687374f6c to before 59057f5d4e9a195c6dd61695ad3bc4481ddf4f14Affected 8d818c1055013d355d36188f21c7535687374f6c to before 8005dc808bcce7d6cc2ae015a3cde1683bee602dAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

8d818c1055013d355d36188f21c7535687374f6c to before 1ec775f6a124cce6278ae58b7d1c78a3bc6eef23Affected
8d818c1055013d355d36188f21c7535687374f6c to before bcf3cf74dfb6981e18b22cbf561f859a0f7faa26Affected
8d818c1055013d355d36188f21c7535687374f6c to before 6407dc85d0a4306681cf6c9be7f05e05dcb67a37Affected
8d818c1055013d355d36188f21c7535687374f6c to before c8cfe11e48b2a4646fa662fcaa92e14810a28d46Affected
8d818c1055013d355d36188f21c7535687374f6c to before 8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7Affected
8d818c1055013d355d36188f21c7535687374f6c to before d0b8cafd529b4ec759190c6081f7a76efb563a8fAffected
8d818c1055013d355d36188f21c7535687374f6c to before 59057f5d4e9a195c6dd61695ad3bc4481ddf4f14Affected
8d818c1055013d355d36188f21c7535687374f6c to before 8005dc808bcce7d6cc2ae015a3cde1683bee602dAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.