Strix
26.1K

CVE-2026-64312

HIGHCVSS 7.5/10EPSS 0.50%

Last modified

CVE-2026-64312 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. EPSS estimates a 0.50% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.50%

40.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a92ccd3618e42333ac6f150ecdac14dca298bc7a, < 81ce16d938db9b88cdc231522c0358395ae8c6b5; >= 96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca, < 3920c5f6edc341729d20d0507e466c6d3b11f372; >= 92834692a539b5b7f409e467a14667d64713b732, < ae93c5b3e2a2968b56d772ca1d06615927b7cc36; >= 5edae7a9a35606017ee6e05911c290acee9fee5a, < 82789a44415e3e31168229421b138278dfb16412; >= 7ddab756f2de5b7b43c122ebebdf37f400fb2b6f, < 4711ca06bd169a2cbc9cc59a6de2ed512c41a880; >= 662f2f13e66d3883b9238b0b96b17886179e60e2, < c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf; >= 662f2f13e66d3883b9238b0b96b17886179e60e2, < 83fa1397d5853de1e27dd52ec44b068ff358ca18; >= 662f2f13e66d3883b9238b0b96b17886179e60e2, < ed459fe319376e876de433d12b6c6772e612ca36; dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6; fca8aed12218f96b38e374ff264d78ea1fbd23cc; a8e0074ffb38c9a5964a221bb998034d016c93a2; >= 5.10.231, < 5.10.261; >= 5.15.174, < 5.15.212; >= 6.1.120, < 6.1.178; >= 6.6.64, < 6.6.145; >= 6.12.2, < 6.12.96; >= 4.19.325, < 4.20; >= 5.4.287, < 5.5; >= 6.11.11, < 6.12
LinuxLinux6.13

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-64312?
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.
How severe is CVE-2026-64312?
CVE-2026-64312 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.50% probability of exploitation in the next 30 days.
How do I fix CVE-2026-64312?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-64312?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST