CVE-2026-64312: falha de alta gravidade em Linux
crypto: pcrypt - restore callback for non-parallel fallback
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.5%
In the Linux kernel, the following vulnerability has been resolved:
crypto: pcrypt - restore callback for non-parallel fallback
pcrypt installs pcrypt_aead_done() on the child AEAD request before
trying to submit it through padata. If padata_do_parallel() returns
-EBUSY, pcrypt falls back to calling the child AEAD directly.
That fallback must not keep the padata completion callback. Otherwise
an asynchronous completion runs pcrypt_aead_done() even though the
request was never enrolled in padata.
Restore the original request callback and callback data before calling
the child AEAD directly. This keeps the fallback path aligned with a
direct AEAD request while leaving the parallel path unchanged.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Linux · LinuxCVEs relacionadas — Linux
No mesmo produto, das mais perigosas para as menos.
CVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 98.1%KEVCVE-2026-46300HIGHnet: skbuff: preserve shared-frag marker during coalescingEPSS 16.1%KEVCVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 3.3%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEV
Referências
https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cfhttps://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36