CVE-2026-46291: fallo en Linux
crypto: caam - guard HMAC key hex dumps in hash_digest_key
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.1%
In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - guard HMAC key hex dumps in hash_digest_key
Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in
hash_digest_key() to avoid leaking secrets at runtime when
CONFIG_DYNAMIC_DEBUG is enabled.
Productos afectados
Linux · LinuxCVEs relacionadas — Linux
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 98.1%KEVCVE-2026-46300HIGHnet: skbuff: preserve shared-frag marker during coalescingEPSS 16.1%KEVCVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 3.3%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEV
Referencias
https://git.kernel.org/stable/c/177730a273b18e195263ed953853273e901b5064https://git.kernel.org/stable/c/2adbfca7452eeac45117b8e803288a2767f7075fhttps://git.kernel.org/stable/c/5cffe3c136891aa4d579bf5c079a68f7cb371b0chttps://git.kernel.org/stable/c/a9207798fe619cbc85c8744a9b9e2af1db2b6e1ahttps://git.kernel.org/stable/c/b8f12d9b00c1950779e5679b9c13908584682bb6https://git.kernel.org/stable/c/c7e52fe3f7901ccb9cd29b3f7c683d809ba87e48https://git.kernel.org/stable/c/cd849c07b8d706425e60a4dfcef54b7b67c967cehttps://git.kernel.org/stable/c/e8e72fdf47bd5ef7abe642b034c6178a61a8580a