---
id: CVE-2026-64315
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: caam - use print_hex_dump_devel to guard key hex dumps

  Use print_hex_dump_devel() for dumping sensitive key material in
  *_setkey() to avoid leaking secrets at …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: caam - use print_hex_dump_devel to guard key hex dumps

  Use print_hex_dump_devel() for dumping sensitive key material in
  *_setkey() to avoid leaking secrets at …
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
published: '2026-07-25'
updated: '2026-07-27'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-64315'
references:
  - url: 'https://git.kernel.org/stable/c/1ec775f6a124cce6278ae58b7d1c78a3bc6eef23'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/59057f5d4e9a195c6dd61695ad3bc4481ddf4f14'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6407dc85d0a4306681cf6c9be7f05e05dcb67a37'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8005dc808bcce7d6cc2ae015a3cde1683bee602d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8904b425cfcafe6a820c94b9bdf4b10f7d70f9d7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bcf3cf74dfb6981e18b22cbf561f859a0f7faa26'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c8cfe11e48b2a4646fa662fcaa92e14810a28d46'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d0b8cafd529b4ec759190c6081f7a76efb563a8f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00149
epssPercentile: 0.03427
ingestedAt: '2026-07-27T06:16:50.401Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

crypto: caam - use print_hex_dump_devel to guard key hex dumps

Use print_hex_dump_devel() for dumping sensitive key material in
*_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG
is enabled.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.