CVE-2026-64315

A flaw was found in the Linux kernel's Cryptographic Acceleration and Assurance Module (CAAM) driver. This vulnerability allows for the leakage of sensitive cryptographic key material. When the kernel's dynamic debugging feature is enabled, an attacker could potentially exploit improper handling of key dumps in cryptographic setup functions, leading to the disclosure of confidential information.

This vulnerability is rated as Moderate severity because exploitation requires local system access alongside an active dynamic debugging configuration on hardware equipped with CAAM cryptographic accelerators. Under typical enterprise deployments, dynamic debug logging is disabled by default, preventing sensitive key material from being emitted into kernel logs. Furthermore, the issue only impacts specific hardware architectures utilizing the CAAM crypto engine and is not present in earlier releases such as Red Hat Enterprise Linux 8 and 9.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.