Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-31543

crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 to < 4897bd307ba8757c31a3325ba6730961be606016affected
  • 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 to < ed8d91f469845d62d44c565a55d2ab1767969357affected
  • 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 to < 36f46b0e36892eba08978eef7502ff3c94ddba77affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.20 to ≤ 6.18.*unaffected
  • 6.19.10 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References