CVE Database›Document archive›CVE-2026-64314

CVE-2026-64314

kernel: crypto: chacha20poly1305 - validate poly1305 template argument

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 27, 2026

Description

A flaw was found in the Linux kernel's chacha20poly1305 cryptographic module. This vulnerability occurs because the chachapoly_create() function does not properly validate a poly1305 template argument. When this argument is missing, an error pointer is incorrectly passed to a string comparison function, leading to a dereference of the error pointer. This can result in a system crash, causing a Denial of Service (DoS) for affected systems.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference