İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 7.5

CVE-2026-64312: Linux Kernel: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.

Özet bilgiler

Ürün
Linux Linux Kernel
CVSS v3.1
7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
%0,50 (yüzdelik 43)
CWE
CWE-662
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
linux-linux-kernel4.19.325—4.20
linux-linux-kernel5.4.287—5.5
linux-linux-kernel5.10.231—5.10.261
linux-linux-kernel5.15.174—5.15.212
linux-linux-kernel6.1.120—6.1.178
linux-linux-kernel6.6.64—6.6.145
linux-linux-kernel6.11.11—6.12
linux-linux-kernel6.12.2—6.12.96
linux-linux-kernel6.13—6.18.39
linux-linux-kernel6.19—7.1.4

Kaynaklar

Uygulamada aç Tüm CVE kayıtları