CVE-2026-64316

crypto: caam - use print_hex_dump_devel to guard key hex dumps

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - use print_hex_dump_devel to guard key hex dumps

Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() and gen_split_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6e005503199b9bf1b385949c05897fd6567b5af4 to before 45c0e3615e5bca5f1fc93357af8d19975c092d4fAffected 6e005503199b9bf1b385949c05897fd6567b5af4 to before 8b56ba10105ca34a4b75f7e33d41d96a63815591Affected 6e005503199b9bf1b385949c05897fd6567b5af4 to before 9a53dc0a0ae0486e164e5af3de5f99ab42c5a23eAffected 6e005503199b9bf1b385949c05897fd6567b5af4 to before ebd37eef6e4f435e18829c0c0c9ba3a6618cb2ddAffected 6e005503199b9bf1b385949c05897fd6567b5af4 to before cea7302d5d05df74cfb4107897b1ca34163c06b9Affected 6e005503199b9bf1b385949c05897fd6567b5af4 to before 6f7b8e0321f3a8fbbd267d2ac15c671ab59e919eAffected 6e005503199b9bf1b385949c05897fd6567b5af4 to before 8cf5fb0503129e53052fe29302379cf83891d0fbAffected 6e005503199b9bf1b385949c05897fd6567b5af4 to before 3f57657b6ea23f933371f2c2846322f441773ceeAffected
LinuxLinux	5.3Affected before 5.3Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

6e005503199b9bf1b385949c05897fd6567b5af4 to before 45c0e3615e5bca5f1fc93357af8d19975c092d4fAffected
6e005503199b9bf1b385949c05897fd6567b5af4 to before 8b56ba10105ca34a4b75f7e33d41d96a63815591Affected
6e005503199b9bf1b385949c05897fd6567b5af4 to before 9a53dc0a0ae0486e164e5af3de5f99ab42c5a23eAffected
6e005503199b9bf1b385949c05897fd6567b5af4 to before ebd37eef6e4f435e18829c0c0c9ba3a6618cb2ddAffected
6e005503199b9bf1b385949c05897fd6567b5af4 to before cea7302d5d05df74cfb4107897b1ca34163c06b9Affected
6e005503199b9bf1b385949c05897fd6567b5af4 to before 6f7b8e0321f3a8fbbd267d2ac15c671ab59e919eAffected
6e005503199b9bf1b385949c05897fd6567b5af4 to before 8cf5fb0503129e53052fe29302379cf83891d0fbAffected
6e005503199b9bf1b385949c05897fd6567b5af4 to before 3f57657b6ea23f933371f2c2846322f441773ceeAffected

LinuxLinux

5.3Affected
before 5.3Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.