In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix DMA corruption on long hmac keys
When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory.
The rounding was performed, but never actually used for the allocation. Fix this by replacing kmemdup with kmalloc for a larger buffer, followed by memcpy.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-oem-22.04a | May 25, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub