Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-06-08T00:00:00 kernel: crypto: caam - guard HMAC key hex dumps in hash_digest_key 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-215

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in hash_digest_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.

A flaw was found in the Linux kernel's crypto: caam component. This vulnerability allows for the disclosure of sensitive HMAC (Hash-based Message Authentication Code) key bytes at runtime. The issue occurs because the hash_digest_key() function uses print_hex_dump_devel() without proper guarding, which can expose these keys when the CONFIG_DYNAMIC_DEBUG option is enabled. This information disclosure could potentially allow an attacker to gain unauthorized access to or tamper with data protected by these keys.

Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-46291 https://nvd.nist.gov/vuln/detail/CVE-2026-46291 https://lore.kernel.org/linux-cve-announce/2026060857-CVE-2026-46291-cb3d@gregkh/T