Yüksek CVSS 7.5
CVE-2026-64312: Linux Kernel: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,50 (yüzdelik 43)
- CWE
- CWE-662
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 4.19.325 | — | 4.20 |
| linux-linux-kernel | 5.4.287 | — | 5.5 |
| linux-linux-kernel | 5.10.231 | — | 5.10.261 |
| linux-linux-kernel | 5.15.174 | — | 5.15.212 |
| linux-linux-kernel | 6.1.120 | — | 6.1.178 |
| linux-linux-kernel | 6.6.64 | — | 6.6.145 |
| linux-linux-kernel | 6.11.11 | — | 6.12 |
| linux-linux-kernel | 6.12.2 | — | 6.12.96 |
| linux-linux-kernel | 6.13 | — | 6.18.39 |
| linux-linux-kernel | 6.19 | — | 7.1.4 |