Memory Corruption Issue in Linux Kernel Crypto Module

CVE-2026-43044

What is CVE-2026-43044?

A memory corruption vulnerability exists in the Linux kernel's crypto module that can occur when handling HMAC keys longer than the block size. Specifically, the fault arises when a key is incorrectly allocated in memory; while the implementation attempts to ensure proper DMA cache alignment, it fails to apply this correction during memory allocation. Consequently, this can lead to the hashing operation corrupting adjacent memory spaces. This issue has been addressed with a fix that replaces the memory duplication method with a more robust allocation strategy, enhancing the integrity and security of cryptographic operations.

References