CVE-2026-64314

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the chachapoly create() function where it fails to validate the second template argument when the compatibility poly1305 parameter is used in the template name. The function passes the result of crypto attr alg name() directly to strcmp() without checking if the argument is missing. If the argument is absent, crypto attr alg name() returns an error pointer, which is then dereferenced by strcmp(), potentially leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.