-

CVE-2026-64314

crypto: chacha20poly1305 - validate poly1305 template argument

In the Linux kernel, the following vulnerability has been resolved:

crypto: chacha20poly1305 - validate poly1305 template argument

chachapoly_create() still accepts the compatibility poly1305 parameter
in the template name, but it assumes the second template argument is
always present and immediately passes it to strcmp().

When the argument is missing, crypto_attr_alg_name() returns an error
pointer. Check for that before comparing the name so malformed template
instantiations fail with an error instead of dereferencing the error
pointer in strcmp().

This matches the surrounding Crypto API template pattern where
crypto_attr_alg_name() results are validated before string-specific use.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a298765e28adaea199f722142c10dae7e24dedf8
Version < 0016d3c21c6ab60a20be7f565cefb5999f3adeb6
Status affected
Version a298765e28adaea199f722142c10dae7e24dedf8
Version < e74df53b36cdc6b6b9e5488ec883d1d55624737f
Status affected
Version a298765e28adaea199f722142c10dae7e24dedf8
Version < 265b861bece38318b8e0fc8fac0643d4ef906d31
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.099
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0016d3c21c6ab60a20be7f565cefb5999f3adeb6
https://git.kernel.org/stable/c/e74df53b36cdc6b6b9e5488ec883d1d55624737f
https://git.kernel.org/stable/c/265b861bece38318b8e0fc8fac0643d4ef906d31