What’s Vulnerable › Vulnerabilities

CVE-2026-64315: crypto: caam - use print_hex_dump_devel to guard key hex dumps

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-25 · updated 2026-10-24

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

Affected products

• Linux kernel: from 4.20 before 5.10.261; from 5.11 before 5.15.212; from 5.16 before 6.1.178; from 6.2 before 6.6.145; from 6.7 before 6.12.96; from 6.13 before 6.18.39 — fixed in 5.10.261, 5.15.212, 6.1.178, 6.12.96, 6.18.39, 6.6.145

How to fix

Upgrade to a fixed version: Linux kernel 5.10.261, 5.15.212, 6.1.178, 6.12.96. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1ec775f6a124cce6278ae58b7d1c78a3bc6eef23
• https://git.kernel.org/stable/c/59057f5d4e9a195c6dd61695ad3bc4481ddf4f14
• https://git.kernel.org/stable/c/6407dc85d0a4306681cf6c9be7f05e05dcb67a37
• https://git.kernel.org/stable/c/8005dc808bcce7d6cc2ae015a3cde1683bee602d
• https://git.kernel.org/stable/c/8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7
• https://git.kernel.org/stable/c/bcf3cf74dfb6981e18b22cbf561f859a0f7faa26
• https://git.kernel.org/stable/c/c8cfe11e48b2a4646fa662fcaa92e14810a28d46
• https://git.kernel.org/stable/c/d0b8cafd529b4ec759190c6081f7a76efb563a8f

Get alerted when CVE-2026-64315 or the next vulnerability affects your stack