Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-64312

crypto: pcrypt - restore callback for non-parallel fallback

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, and 5 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From a92ccd3618e42333ac6f150ecdac14dca298bc7a · fixed in 81ce16d938db9b88cdc231522c0358395ae8c6b5; From 96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca · fixed in 3920c5f6edc341729d20d0507e466c6d3b11f372; From 92834692a539b5b7f409e467a14667d64713b732 · fixed in ae93c5b3e2a2968b56d772ca1d06615927b7cc36; From 5edae7a9a35606017ee6e05911c290acee9fee5a · fixed in 82789a44415e3e31168229421b138278dfb16412; From 7ddab756f2de5b7b43c122ebebdf37f400fb2b6f · fixed in 4711ca06bd169a2cbc9cc59a6de2ed512c41a880; From 662f2f13e66d3883b9238b0b96b17886179e60e2 · fixed in c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf; From 662f2f13e66d3883b9238b0b96b17886179e60e2 · fixed in 83fa1397d5853de1e27dd52ec44b068ff358ca18; From 662f2f13e66d3883b9238b0b96b17886179e60e2 · fixed in ed459fe319376e876de433d12b6c6772e612ca36; From 5.10.231 · fixed in 5.10.261; From 5.15.174 · fixed in 5.15.212; From 6.1.120 · fixed in 6.1.178; From 6.6.64 · fixed in 6.6.145; From 6.12.2 · fixed in 6.12.96; From 4.19.325 · fixed in 4.20; From 5.4.287 · fixed in 5.5; From 6.11.11 · fixed in 6.12

  • Linux Linux

    6.13

  • KernelLinux

    fixed in 5.10.261; From 5.11.0 · fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.96; From 6.13.0 · fixed in 6.18.39; fixed in 7.1.4

References 8

git.kernel.org