CVE-2026-93161
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
crypto: qat - clear AES key schedule from stack
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - clear AES key schedule from stack qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack. That schedule contains key material and can remain in the stack frame. Clear the temporary crypto_aes_ctx with memzero_explicit() after the copy.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | b9cf42622b30178f554fa74411eec67e02d70411 | Unavailable | None listed |
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | fb1194b78a163cc56bb9480c707fc34b53522359 | Unavailable | None listed |
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | 892f34dc1819cceb8841005a68086710ce3763b6 | Unavailable | None listed |
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | dcaa0f1e86cbcb01f68131ae907b54cf299a3592 | Unavailable | None listed |
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | 9af019e213ada5c3d0d33c515071a1414b6899f3 | Unavailable | None listed |
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | 92e4979e1a770860b26aa3d90cce0c4c6a53833c | Unavailable | None listed |
| 5106dfeaeabea73d5132daab1d89d57b57fa98b7 | affected | git | d41a9fcfb7f9ee36e4a4aaf5e7996bca6be1e7a9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.11 | Unavailable | None listed |
| 5.15.221 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.188 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.157 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.110 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.52 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.6 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |