-

CVE-2026-93161

crypto: qat - clear AES key schedule from stack

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - clear AES key schedule from stack

qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack.
That schedule contains key material and can remain in the stack frame.

Clear the temporary crypto_aes_ctx with memzero_explicit() after the copy.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < b9cf42622b30178f554fa74411eec67e02d70411
Status affected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < fb1194b78a163cc56bb9480c707fc34b53522359
Status affected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < 892f34dc1819cceb8841005a68086710ce3763b6
Status affected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < dcaa0f1e86cbcb01f68131ae907b54cf299a3592
Status affected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < 9af019e213ada5c3d0d33c515071a1414b6899f3
Status affected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < 92e4979e1a770860b26aa3d90cce0c4c6a53833c
Status affected
Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7
Version < d41a9fcfb7f9ee36e4a4aaf5e7996bca6be1e7a9
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.11
Status affected
Version 0
Version < 5.11
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.11
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b9cf42622b30178f554fa74411eec67e02d70411
https://git.kernel.org/stable/c/fb1194b78a163cc56bb9480c707fc34b53522359
https://git.kernel.org/stable/c/892f34dc1819cceb8841005a68086710ce3763b6
https://git.kernel.org/stable/c/dcaa0f1e86cbcb01f68131ae907b54cf299a3592
https://git.kernel.org/stable/c/9af019e213ada5c3d0d33c515071a1414b6899f3
https://git.kernel.org/stable/c/92e4979e1a770860b26aa3d90cce0c4c6a53833c
https://git.kernel.org/stable/c/d41a9fcfb7f9ee36e4a4aaf5e7996bca6be1e7a9