In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory.
The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 22, 2026 | May 8, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade perfUpgrade kernelUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade python3-perfUpgrade libperfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-modules-extra-matched | Jun 24, 2026 | Jun 22, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-laptop-23.10Upgrade linux-image-kvmUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-6.8 | May 25, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub