CVE-2026-64314 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapoly_create() still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediately passes it to strcmp(). When the argument is missing, crypto_attr_alg_name() returns an error pointer. Check for that before comparing the name so malformed template instantiations fail with an error instead of dereferencing the error pointer in strcmp(). This matches the surrounding Crypto API template pattern where crypto_attr_alg_name() results are validated before string-specific use.
A vulnerability in the Linux kernel's Crypto API implementation of the ChaCha20-Poly1305 algorithm has been addressed. The issue arose because the function 'chachapoly_create()' accepted a compatibility parameter for Poly1305 in the template name but incorrectly assumed that a second template argument was always present. This oversight led to a potential dereference of an error pointer when the argument was missing, causing a validation failure. The vulnerability has been fixed by ensuring that the template argument is checked before use, aligning with the proper validation pattern used in other Crypto API templates.
Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0016d3c21c6ab60a20be7f565cefb5999f3adeb6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/265b861bece38318b8e0fc8fac0643d4ef906d31 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e74df53b36cdc6b6b9e5488ec883d1d55624737f | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.16, < 6.18.39 >= 6.19, < 7.1.4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 3, 2026 | Initial Analysis | [email protected] |
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |