CVE-2026-31543

A flaw was found in the Linux kernel. When debug logging is enabled, the read_key_from_user_keying function logs the initial 8 bytes of the key payload. This action partially exposes the dm-crypt key, leading to information disclosure.

The change stops debug logging from printing the first bytes of dm-crypt keys read from user keyrings, which is a confidentiality hardening issue when crash_dump debug is enabled. Red Hat recommends disabling unnecessary debug on sensitive systems and taking patched kernels. This is not a cryptographic break of dm-crypt itself.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.