CVEvulnerability
CVE-2026-64312
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-07-25
- Last modified
- 2026-10-24
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-662
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: pcrypt - restore callback for non-parallel fallback
pcrypt installs pcrypt_aead_done() on the child AEAD request before
trying to submit it through padata. If padata_do_parallel() returns
-EBUSY, pcrypt falls back to calling the child AEAD directly.
That fallback must not keep the padata completion callback. Otherwise
an asynchronous completion runs pcrypt_aead_done() even though the
request was never enrolled in padata.
Restore the original request callback and callback data before calling
the child AEAD directly. This keeps the fallback path aligned with a
direct AEAD request while leaving the parallel path unchanged.
Affected configurations
• linux linux kernel (>= 4.19.325 < 4.20)
• linux linux kernel (>= 5.4.287 < 5.5)
• linux linux kernel (>= 5.10.231 < 5.10.261)
• linux linux kernel (>= 5.15.174 < 5.15.212)
• linux linux kernel (>= 6.1.120 < 6.1.178)
• linux linux kernel (>= 6.6.64 < 6.6.145)
• linux linux kernel (>= 6.11.11 < 6.12)
• linux linux kernel (>= 6.12.2 < 6.12.96)
• linux linux kernel (>= 6.13 < 6.18.39)
• linux linux kernel (>= 6.19 < 7.1.4)
Related
Weakness · CWE (1)
- CWE-662 Improper Synchronization weakness
References
- https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372 Patch
- https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880 Patch
- https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5 Patch
- https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412 Patch
- https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18 Patch
- https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36 Patch
- https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf Patch
- https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36 Patch