CVE-2026-64316

A flaw was found in the Linux kernel's crypto: caam module. This vulnerability allows for information disclosure where sensitive cryptographic key material could be leaked at runtime. This occurs when the CONFIG_DYNAMIC_DEBUG option is enabled, due to improper guarding of key dumps in the *_setkey() and gen_split_key() functions. This could allow a local attacker to gain access to sensitive information.

Red Hat has rated this issue as having a Moderate impact because exploitation requires local access, is limited to systems equipped with NXP CAAM hardware acceleration, and requires dynamic debug logging to be active to leak cryptographic key data into system logs. Standard enterprise deployments without CAAM hardware do not load or expose this subsystem, and dynamic debugging is not enabled during routine production workloads. Consequently, exposure is confined to specialized embedded or automotive environments where debug logging is explicitly enabled and local users can read kernel log messages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.