CVE-2026-64312 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.
A vulnerability in the Linux kernel's pcrypt module affects the handling of asynchronous callbacks for AEAD (Authenticated Encryption with Associated Data) requests. When pcrypt encounters a busy state while attempting to process requests in parallel, it reverts to a direct, non-parallel method. However, this fallback improperly retains the padata completion callback, leading to a situation where the callback is executed even though the request was not processed as intended. This issue has been addressed by modifying the fallback mechanism to restore the original callback and associated data, ensuring that the asynchronous completion only occurs for requests that were genuinely handled in parallel.
Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880 | kernel.org | Patch |
| https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412 | kernel.org | Patch |
| https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf | kernel.org | Patch |
| https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.19.325, < 4.20 >= 5.4.287, < 5.5 >= 5.10.231, < 5.10.261 >= 5.15.174, < 5.15.212 >= 6.1.120, < 6.1.178 >= 6.6.64, < 6.6.145 >= 6.11.11, < 6.12 >= 6.12.2, < 6.12.96 >= 6.13, < 6.18.39 >= 6.19, < 7.1.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 3, 2026 | Initial Analysis | [email protected] |
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 27, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |