QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-31543

Back to search

CVE-2026-31543

Published: Apr 24, 2026

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes.

VendorProductVersions

Linux

Linux

affected
479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 - < 4897bd307ba8757c31a3325ba6730961be606016
affected
479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 - < ed8d91f469845d62d44c565a55d2ab1767969357
affected
479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 - < 36f46b0e36892eba08978eef7502ff3c94ddba77

Linux

Linux

affected
6.16
unaffected
0 - < 6.16
unaffected
6.18.20 - <= 6.18.*
unaffected
6.19.10 - <= 6.19.*
unaffected
7.0 - <= *

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now