CVE-2026-43330
published 2026-05-08CVE-2026-43330: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.13%
2.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size is supplied, it is copied and then
hashed into the real key. The memory allocated for the copy needs to
be rounded to DMA cache alignment, as otherwise the hashed key may
corrupt neighbouring memory.
The copying is performed using kmemdup, however this leads to an overflow:
reading more bytes (aligned_len - keylen) from the keylen source buffer.
Fix this by replacing kmemdup with kmalloc, followed by memcpy.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 199354d7fb6eaa2cc5bb650af0bca624baffee35 < 31022cfde5235c45fa765f0aabeff5f0652852f2 | 31022cfde5235c45fa765f0aabeff5f0652852f2 |
| linux | linux | >= 199354d7fb6eaa2cc5bb650af0bca624baffee35 < c2fb4984fe09fc176fe4c12d5e3edf626df6511d | c2fb4984fe09fc176fe4c12d5e3edf626df6511d |
| linux | linux | >= 199354d7fb6eaa2cc5bb650af0bca624baffee35 < aa545df011338df13f0833fc1fabcb15c0521959 | aa545df011338df13f0833fc1fabcb15c0521959 |
| linux | linux | >= 199354d7fb6eaa2cc5bb650af0bca624baffee35 < cebc5ebd958346195b77f42d0cd5141b4e448fae | cebc5ebd958346195b77f42d0cd5141b4e448fae |
| linux | linux | >= 199354d7fb6eaa2cc5bb650af0bca624baffee35 < 80688afb9c35b3934ce2d6be9973758915e2e0ef | 80688afb9c35b3934ce2d6be9973758915e2e0ef |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.13 < 6.18.22 | 6.18.22 |
| linux | linux_kernel | >= 6.19 < 6.19.12 | 6.19.12 |
| linux | linux_kernel | >= 6.3 < 6.6.134 | 6.6.134 |
| linux | linux_kernel | >= 6.7 < 6.12.81 | 6.12.81 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.6.133/6.12.80/6.18.21/6.19.11 crypto aligned_len buffer overflow (WID-SEC-2026-1454)
vuldb·2026-06-18·CVSS 7.8
CVE-2026-43330 [HIGH] Linux Kernel up to 6.6.133/6.12.80/6.18.21/6.19.11 crypto aligned_len buffer overflow (WID-SEC-2026-1454)
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.133/6.12.80/6.18.21/6.19.11. Affected is the function aligned_len of the component crypto. Such manipulation leads to buffer overflow.
This vulnerability is listed as CVE-2026-43330. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
GHSA-7669-mcjm-pwg9: In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size
ghsa_unreviewed·2026-05-08
CVE-2026-43330 GHSA-7669-mcjm-pwg9: In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size
In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size is supplied, it is copied and then
hashed into the real key. The memory allocated for the copy needs to
be rounded to DMA cache alignment, as otherwise the hashed key may
corrupt neighbouring memory.
The copying is performed using kmemdup, however this leads to an overflow:
reading more bytes (aligned_len - keylen) from the keylen source buffer.
Fix this by replacing kmemdup with kmalloc, followed by memcpy.
Red Hat
kernel: crypto: caam - fix overflow on long hmac keys
vendor_redhat·2026-05-08·CVSS 7.8
CVE-2026-43330 [HIGH] CWE-125 kernel: crypto: caam - fix overflow on long hmac keys
kernel: crypto: caam - fix overflow on long hmac keys
A flaw was found in the Linux kernel's caam cryptographic accelerator driver. When processing a Hash-based Message Authentication Code (HMAC) key that exceeds the block size, the driver incorrectly handles memory allocation and copying. This can lead to an overflow, where the system attempts to read beyond the intended memory buffer, potentially corrupting neighboring memory. This memory corruption could lead to system instability or denial of service.
Package: kernel (Red Hat Enterprise Linux 10) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Lin
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/31022cfde5235c45fa765f0aabeff5f0652852f2https://git.kernel.org/stable/c/80688afb9c35b3934ce2d6be9973758915e2e0efhttps://git.kernel.org/stable/c/aa545df011338df13f0833fc1fabcb15c0521959https://git.kernel.org/stable/c/c2fb4984fe09fc176fe4c12d5e3edf626df6511dhttps://git.kernel.org/stable/c/cebc5ebd958346195b77f42d0cd5141b4e448fae
2026-05-08
Published