High 7.8Published May 1, 2026

CVE-2026-43044crypto: caam - fix DMA corruption on long hmac keys

Updated under an hour ago (Oct 27, 2026, 2:20 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory. The rounding was performed, but never actually used for the allocation. Fix this by replacing kmemdup with kmalloc for a larger buffer, followed by memcpy.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 199354d7fb6eaa2cc5bb650af0bca624baffee35 before a7ecf06d3ee06e9b3322e1e7b003ea5c6f6e135a; from 199354d7fb6eaa2cc5bb650af0bca624baffee35 before c0c133e0225d87aad326bb90bbce9bdd6fde3cbb; 199354d7fb6eaa2cc5bb650af0bca624baffee35 builds before 68feed135a0c7243a9275ae7e6a18260f755f52b; from 199354d7fb6eaa2cc5bb650af0bca624baffee35 before f2af8be110bde26b3e3354efdfdda97f426306a4; 199354d7fb6eaa2cc5bb650af0bca624baffee35 builds before 5ddfdcbe10dc5f97afc4e46ca22be2be717e8caf	CNA record
linux linux_kernel linux:linux_kernel	from 6.3 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a7ecf06d3ee06e9b3322e1e7b003ea5c6f6e135a	patch
https://git.kernel.org/stable/c/c0c133e0225d87aad326bb90bbce9bdd6fde3cbb	patch
https://git.kernel.org/stable/c/68feed135a0c7243a9275ae7e6a18260f755f52b	patch
https://git.kernel.org/stable/c/f2af8be110bde26b3e3354efdfdda97f426306a4	patch
https://git.kernel.org/stable/c/5ddfdcbe10dc5f97afc4e46ca22be2be717e8caf	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.