CVE-2026-43330Patch(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory. The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-08: 3Patch / Workaround · 2026-05-08: 2Technical Details · 2026-05-08: 205-08
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Patch

    CVE-2026-43330 In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it … https://www.cve.org/CVERecord?id=CVE-2026-43330

    Post summary

    A patch has addressed the CAAM cryptographic overflow bug in the Linux kernel; the text provides technical details but offers no PoC, exploit, or evidence of active use.

    00010146
    57.5K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-43330 In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it … https://www.cve.org/CVERecord?id=CVE-2026-43330 ----- Traducción: CVE-2026-43330 En … http://infoflow.cloud`

    Post summary

    The text announces that CVE‑2026‑43330, an overflow issue in the Linux kernel caam crypto module, has been fixed, without mentioning PoC, exploit tools, or active attacks.

    0000032
    76 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-43330) https://vuldb.com/vuln/362109

    Post summary

    The post announces that the severity of the newly discovered Linux kernel vulnerability CVE‑2026‑43330 has been increased, but provides no further technical details, patches, or exploitation information.

    0000046
    2.1K followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more