CVE-2026-64315 - Vulnerability Details

- crypto: caam - use print_hex_dump_devel to guard key hex dumps

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - use print_hex_dump_devel to guard key hex dumps

Use print_hex_dump_devel() for dumping sensitive key material in
*_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG
is enabled.

Published: 2026-07-25

Score: 7 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< 1ec775f6a124cce6278ae58b7d1c78a3bc6eef23
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< bcf3cf74dfb6981e18b22cbf561f859a0f7faa26
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< 6407dc85d0a4306681cf6c9be7f05e05dcb67a37
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< c8cfe11e48b2a4646fa662fcaa92e14810a28d46
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< 8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< d0b8cafd529b4ec759190c6081f7a76efb563a8f
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< 59057f5d4e9a195c6dd61695ad3bc4481ddf4f14
`8d818c1055013d355d36188f21c7535687374f6c`	affected	< 8005dc808bcce7d6cc2ae015a3cde1683bee602d

Linux

affected

Version	Status	Constraints
`4.20`	affected	—
`0`	unaffected	< 4.20
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.96`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[8d818c1055013d355d36188f21c7535687374f6c,1ec775f6a124cce6278ae58b7d1c78a3bc6eef23)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,bcf3cf74dfb6981e18b22cbf561f859a0f7faa26)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,6407dc85d0a4306681cf6c9be7f05e05dcb67a37)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,c8cfe11e48b2a4646fa662fcaa92e14810a28d46)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,d0b8cafd529b4ec759190c6081f7a76efb563a8f)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,59057f5d4e9a195c6dd61695ad3bc4481ddf4f14)`	affected	code_commit	—
`[8d818c1055013d355d36188f21c7535687374f6c,8005dc808bcce7d6cc2ae015a3cde1683bee602d)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.20`	affected	generic	—
`[0,4.20)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.96,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00145.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1ec775f6a124cce6278ae58b7d1c78a3bc6eef23
https://git.kernel.org/stable/c/59057f5d4e9a195c6dd61695ad3bc4481ddf4f14
https://git.kernel.org/stable/c/6407dc85d0a4306681cf6c9be7f05e05dcb67a37
https://git.kernel.org/stable/c/8005dc808bcce7d6cc2ae015a3cde1683bee602d
https://git.kernel.org/stable/c/8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7
https://git.kernel.org/stable/c/bcf3cf74dfb6981e18b22cbf561f859a0f7faa26
https://git.kernel.org/stable/c/c8cfe11e48b2a4646fa662fcaa92e14810a28d46
https://git.kernel.org/stable/c/d0b8cafd529b4ec759190c6081f7a76efb563a8f
https://lore.kernel.org/linux-cve-announce/2026072510-CVE-2026-64315-6255@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64315
https://www.cve.org/CVERecord?id=CVE-2026-64315

History

Thu, 30 Jul 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-215
References		https://lore.kernel.org/linux-cve-announce/2026072510-CVE-2026-64315-6255@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64315 https://www.cve.org/CVERecord?id=CVE-2026-64315
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 27 Jul 2026 05:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Sun, 26 Jul 2026 02:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-200

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.
Title		crypto: caam - use print_hex_dump_devel to guard key hex dumps
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1ec775f6a124cce6278ae58b7d1c78a3bc6eef23 https://git.kernel.org/stable/c/59057f5d4e9a195c6dd61695ad3bc4481ddf4f14 https://git.kernel.org/stable/c/6407dc85d0a4306681cf6c9be7f05e05dcb67a37 https://git.kernel.org/stable/c/8005dc808bcce7d6cc2ae015a3cde1683bee602d https://git.kernel.org/stable/c/8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7 https://git.kernel.org/stable/c/bcf3cf74dfb6981e18b22cbf561f859a0f7faa26 https://git.kernel.org/stable/c/c8cfe11e48b2a4646fa662fcaa92e14810a28d46 https://git.kernel.org/stable/c/d0b8cafd529b4ec759190c6081f7a76efb563a8f

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:49:45.787Z

Updated: 2026-07-27T04:59:41.861Z

Reserved: 2026-07-19T15:36:31.779Z

Link: CVE-2026-64315

Vulnrichment

No data.

NVD

No data.

Redhat

Severity : Moderate

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64315 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-26T02:30:04Z

Weaknesses

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-215
Insertion of Sensitive Information Into Debugging Code

Tracking

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object