Riskcovery

CVE-2026-93161

crypto: qat - clear AES key schedule from stack

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - clear AES key schedule from stack

qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack. That schedule contains key material and can remain in the stack frame.

Clear the temporary crypto_aes_ctx with memzero_explicit() after the copy.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before b9cf42622b30178f554fa74411eec67e02d70411Affected
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before fb1194b78a163cc56bb9480c707fc34b53522359Affected
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before 892f34dc1819cceb8841005a68086710ce3763b6Affected
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before dcaa0f1e86cbcb01f68131ae907b54cf299a3592Affected
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before 9af019e213ada5c3d0d33c515071a1414b6899f3Affected
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before 92e4979e1a770860b26aa3d90cce0c4c6a53833cAffected
  • 5106dfeaeabea73d5132daab1d89d57b57fa98b7 to before d41a9fcfb7f9ee36e4a4aaf5e7996bca6be1e7a9Affected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.15.221 through 5.15.*Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.