PT-2026-38981 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-14 · CVE-2026-43330

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An overflow occurs in the crypto caam component when a key longer than the block size is supplied. The system copies and hashes the key into the real key, but the memory allocated for the copy must be rounded to DMA cache alignment to prevent corruption of neighboring memory. The use of the kmemdup() function causes the system to read more bytes than intended (specifically aligned len minus keylen) from the source buffer.

Recommendations Replace the kmemdup() function with kmalloc() followed by memcpy() to ensure correct memory handling.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-43330

Affected Products

Linux Kernel

References · 17

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43330 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43330 · Security Note
• https://git.kernel.org/stable/c/aa545df011338df13f0833fc1fabcb15c0521959 · Patch
• https://git.kernel.org/stable/c/c2fb4984fe09fc176fe4c12d5e3edf626df6511d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43330 · Security Note
• https://git.kernel.org/stable/c/80688afb9c35b3934ce2d6be9973758915e2e0ef · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43330 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43330 · Vendor Advisory
• https://git.kernel.org/stable/c/cebc5ebd958346195b77f42d0cd5141b4e448fae · Patch
• https://git.kernel.org/stable/c/31022cfde5235c45fa765f0aabeff5f0652852f2 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43330 · Vendor Advisory
• https://twitter.com/vuldb/status/2052763747102728466 · Twitter Post
• https://git.kernel.org/linus/80688afb9c35b3934ce2d6be9973758915e2e0ef · Note
• https://twitter.com/CVEnew/status/2052811052463616157 · Twitter Post