Log in Start free

Vulnerability · Published May 8, 2026 · Assigned by Linux

CVE-2026-43330crypto: caam - fix overflow on long hmac keys

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory. The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-abi-stablelists6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-cross-headers6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-devel-matched6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-doc6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-headers6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-debug6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-debug-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-tools6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-tools-libs6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-uki-virt6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10libperf6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10perf6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10python3-perf6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10rtla6.12.0-211.26.1.el10_2ALSA-2026:27288
AlmaLinux:10rv6.12.0-211.26.1.el10_2ALSA-2026:27288
Debian:13linux6.12.85-1DEBIAN-CVE-2026-43330
Debian:14linux6.19.12-1DEBIAN-CVE-2026-43330
Rocky Linux:10kernel0:6.12.0-211.26.1.el10_2RLSA-2026:27288
Ubuntu:24.04:LTSlinux6.8.0-136.136UBUNTU-CVE-2026-43330
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-aws6.8.0-1061.64UBUNTU-CVE-2026-43330
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1061.64~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2026-43330
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2026-43330
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-gcp6.8.0-1064.72UBUNTU-CVE-2026-43330
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1064.72~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-gke6.8.0-1059.67UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1046.50UBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-ibm6.8.0-1061.62UBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1061.62~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-136.136.2UBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-136.136.2~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1059.62UBUNTU-CVE-2026-43330
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1006.6UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1059.62~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1059.62.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1030.31UBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oracle6.8.0-1058.61UBUNTU-CVE-2026-43330
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1058.61~22.04.1UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-raspi6.8.0-1061.65UBUNTU-CVE-2026-43330
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-43330
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-43330
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-136.136~22.04.3UBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-43330
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2026-43330
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1033.34UBUNTU-CVE-2026-43330

Affected products (as reported)

VendorProductVersions
Linux Linux 199354d7fb6eaa2cc5bb650af0bca624baffee35 – before 31022cfde5235c45fa765f0aabeff5f0652852f2199354d7fb6eaa2cc5bb650af0bca624baffee35 – before c2fb4984fe09fc176fe4c12d5e3edf626df6511d199354d7fb6eaa2cc5bb650af0bca624baffee35 – before aa545df011338df13f0833fc1fabcb15c0521959199354d7fb6eaa2cc5bb650af0bca624baffee35 – before cebc5ebd958346195b77f42d0cd5141b4e448fae199354d7fb6eaa2cc5bb650af0bca624baffee35 – before 80688afb9c35b3934ce2d6be9973758915e2e0ef
Linux Linux 6.3

References