High severity7.8NVD Advisory· Published May 8, 2026· Updated Jun 17, 2026
CVE-2026-43330
CVE-2026-43330
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory.
The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.
Affected products
97cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.3,<6.6.134
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- (no CPE)
- osv-coords89 versionspkg:linux/kernelpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rvpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
>= 6.3.0, < 6.6.134+ 88 more
- (no CPE)range: >= 6.3.0, < 6.6.134
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1.160000.2.19
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/31022cfde5235c45fa765f0aabeff5f0652852f2nvdPatch
- git.kernel.org/stable/c/80688afb9c35b3934ce2d6be9973758915e2e0efnvdPatch
- git.kernel.org/stable/c/aa545df011338df13f0833fc1fabcb15c0521959nvdPatch
- git.kernel.org/stable/c/c2fb4984fe09fc176fe4c12d5e3edf626df6511dnvdPatch
- git.kernel.org/stable/c/cebc5ebd958346195b77f42d0cd5141b4e448faenvdPatch
News mentions
0No linked articles in our index yet.