NetSight
IP …
high7.5

CVE-2026-64312

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_don…

Impact

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.325 before 4.20
from 5.4.287 before 5.5
from 5.10.231 before 5.10.261
from 5.15.174 before 5.15.212
from 6.1.120 before 6.1.178
from 6.6.64 before 6.6.145

Weakness classification

CWE-662

References