CVE-2026-43044

A flaw was found in the Linux kernel's crypto: caam module. When processing HMAC (Keyed-Hash Message Authentication Code) keys longer than the block size, the memory allocated for the key copy was not correctly aligned for Direct Memory Access (DMA) operations. This oversight could lead to DMA corruption, potentially causing the hashed key to corrupt adjacent memory. Such corruption could result in system instability or data integrity issues.

Freescale CAAM could corrupt DMA when HMAC keys exceed hardware limits; upstream clamps key material. Red Hat recommends SoCs using caam to take crypto engine fixes via kernel errata.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the caam module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.