CVE-2026-43330

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An overflow occurs in the crypto caam component when a key longer than the block size is supplied. The system copies and hashes the key into the real key, but the memory allocated for the copy must be rounded to DMA cache alignment to prevent corruption of neighboring memory. The use of the kmemdup() function causes the system to read more bytes than intended (specifically aligned len minus keylen) from the source buffer.

Recommendations Replace the kmemdup() function with kmalloc() followed by memcpy() to ensure correct memory handling.