Medium 5.5Published Jul 25, 2026

CVE-2026-64316crypto: caam - use print_hex_dump_devel to guard key hex dumps

Updated under an hour ago (Oct 27, 2026, 8:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() and gen_split_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 6e005503199b9bf1b385949c05897fd6567b5af4 before 45c0e3615e5bca5f1fc93357af8d19975c092d4f; from 6e005503199b9bf1b385949c05897fd6567b5af4 before 8b56ba10105ca34a4b75f7e33d41d96a63815591; from 6e005503199b9bf1b385949c05897fd6567b5af4 before 9a53dc0a0ae0486e164e5af3de5f99ab42c5a23e; from 6e005503199b9bf1b385949c05897fd6567b5af4 before ebd37eef6e4f435e18829c0c0c9ba3a6618cb2dd; from 6e005503199b9bf1b385949c05897fd6567b5af4 before cea7302d5d05df74cfb4107897b1ca34163c06b9; from 6e005503199b9bf1b385949c05897fd6567b5af4 before 6f7b8e0321f3a8fbbd267d2ac15c671ab59e919e; from 6e005503199b9bf1b385949c05897fd6567b5af4 before 8cf5fb0503129e53052fe29302379cf83891d0fb; 6e005503199b9bf1b385949c05897fd6567b5af4 builds before 3f57657b6ea23f933371f2c2846322f441773cee	CNA record
linux linux_kernel linux:linux_kernel	from 5.3 before 5.10.261; from 5.11 before 5.15.212; from 5.16 before 6.1.178; from 6.2 before 6.6.145; from 6.7 before 6.12.96; from 6.13 before 6.18.39; from 6.19 before 7.1.4	NVD

References

References

https://git.kernel.org/stable/c/45c0e3615e5bca5f1fc93357af8d19975c092d4f	patch
https://git.kernel.org/stable/c/8b56ba10105ca34a4b75f7e33d41d96a63815591	patch
https://git.kernel.org/stable/c/9a53dc0a0ae0486e164e5af3de5f99ab42c5a23e	patch
https://git.kernel.org/stable/c/ebd37eef6e4f435e18829c0c0c9ba3a6618cb2dd	patch
https://git.kernel.org/stable/c/cea7302d5d05df74cfb4107897b1ca34163c06b9	patch
https://git.kernel.org/stable/c/6f7b8e0321f3a8fbbd267d2ac15c671ab59e919e	patch
https://git.kernel.org/stable/c/8cf5fb0503129e53052fe29302379cf83891d0fb	patch
https://git.kernel.org/stable/c/3f57657b6ea23f933371f2c2846322f441773cee	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.