CVE-2026-31543
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-04-24
Modified: 2026-11-11
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes.
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 < 4897bd307ba8757c31a3325ba6730961be606016 |
| Linux | Linux | 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 < ed8d91f469845d62d44c565a55d2ab1767969357 |
| Linux | Linux | 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 < 36f46b0e36892eba08978eef7502ff3c94ddba77 |
| Linux | Linux | 6.16 |
| linux | linux_kernel | 6.16 – 6.18.20 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |