CVE-2026-46291

A flaw was found in the Linux kernel's crypto: caam component. This vulnerability allows for the disclosure of sensitive HMAC (Hash-based Message Authentication Code) key bytes at runtime. The issue occurs because the hash_digest_key() function uses print_hex_dump_devel() without proper guarding, which can expose these keys when the CONFIG_DYNAMIC_DEBUG option is enabled. This information disclosure could potentially allow an attacker to gain unauthorized access to or tamper with data protected by these keys.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.