CVE-2026-64312 - Vulnerability Details

- crypto: pcrypt - restore callback for non-parallel fallback

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: pcrypt - restore callback for non-parallel fallback

pcrypt installs pcrypt_aead_done() on the child AEAD request before
trying to submit it through padata. If padata_do_parallel() returns
-EBUSY, pcrypt falls back to calling the child AEAD directly.

That fallback must not keep the padata completion callback. Otherwise
an asynchronous completion runs pcrypt_aead_done() even though the
request was never enrolled in padata.

Restore the original request callback and callback data before calling
the child AEAD directly. This keeps the fallback path aligned with a
direct AEAD request while leaving the parallel path unchanged.

Published: 2026-07-25

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`a92ccd3618e42333ac6f150ecdac14dca298bc7a`	affected	< 81ce16d938db9b88cdc231522c0358395ae8c6b5
`96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca`	affected	< 3920c5f6edc341729d20d0507e466c6d3b11f372
`92834692a539b5b7f409e467a14667d64713b732`	affected	< ae93c5b3e2a2968b56d772ca1d06615927b7cc36
`5edae7a9a35606017ee6e05911c290acee9fee5a`	affected	< 82789a44415e3e31168229421b138278dfb16412
`7ddab756f2de5b7b43c122ebebdf37f400fb2b6f`	affected	< 4711ca06bd169a2cbc9cc59a6de2ed512c41a880
`662f2f13e66d3883b9238b0b96b17886179e60e2`	affected	< c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf
`662f2f13e66d3883b9238b0b96b17886179e60e2`	affected	< 83fa1397d5853de1e27dd52ec44b068ff358ca18
`662f2f13e66d3883b9238b0b96b17886179e60e2`	affected	< ed459fe319376e876de433d12b6c6772e612ca36
`dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6`	affected	—
`fca8aed12218f96b38e374ff264d78ea1fbd23cc`	affected	—
`a8e0074ffb38c9a5964a221bb998034d016c93a2`	affected	—
`5.10.231`	affected	< 5.10.261
`5.15.174`	affected	< 5.15.212
`6.1.120`	affected	< 6.1.178
`6.6.64`	affected	< 6.6.145
`6.12.2`	affected	< 6.12.96
`4.19.325`	affected	< 4.20
`5.4.287`	affected	< 5.5
`6.11.11`	affected	< 6.12

Linux

affected

Version	Status	Constraints
`6.13`	affected	—
`0`	unaffected	< 6.13
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.96`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[a92ccd3618e42333ac6f150ecdac14dca298bc7a,81ce16d938db9b88cdc231522c0358395ae8c6b5)`	affected	code_commit	—
`[96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca,3920c5f6edc341729d20d0507e466c6d3b11f372)`	affected	code_commit	—
`[92834692a539b5b7f409e467a14667d64713b732,ae93c5b3e2a2968b56d772ca1d06615927b7cc36)`	affected	code_commit	—
`[5edae7a9a35606017ee6e05911c290acee9fee5a,82789a44415e3e31168229421b138278dfb16412)`	affected	code_commit	—
`[7ddab756f2de5b7b43c122ebebdf37f400fb2b6f,4711ca06bd169a2cbc9cc59a6de2ed512c41a880)`	affected	code_commit	—
`[662f2f13e66d3883b9238b0b96b17886179e60e2,c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf)`	affected	code_commit	—
`[662f2f13e66d3883b9238b0b96b17886179e60e2,83fa1397d5853de1e27dd52ec44b068ff358ca18)`	affected	code_commit	—
`[662f2f13e66d3883b9238b0b96b17886179e60e2,ed459fe319376e876de433d12b6c6772e612ca36)`	affected	code_commit	—
`dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6`	affected	code_commit	—
`fca8aed12218f96b38e374ff264d78ea1fbd23cc`	affected	code_commit	—
`a8e0074ffb38c9a5964a221bb998034d016c93a2`	affected	code_commit	—
`[5.10.231,5.10.261)`	affected	semver	—
`[5.15.174,5.15.212)`	affected	semver	—
`[6.1.120,6.1.178)`	affected	semver	—
`[6.6.64,6.6.145)`	affected	semver	—
`[6.12.2,6.12.96)`	affected	semver	—
`[4.19.325,4.20)`	affected	semver	—
`[5.4.287,5.5)`	affected	semver	—
`[6.11.11,6.12)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.13`	affected	semver	—
`[0,6.13)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.96,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*)`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372
https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880
https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5
https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412
https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18
https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36
https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf
https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36

History

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.
Title		crypto: pcrypt - restore callback for non-parallel fallback
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372 https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880 https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5 https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412 https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18 https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36 https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:49:43.940Z

Updated: 2026-07-25T08:49:43.940Z

Reserved: 2026-07-19T15:36:31.779Z

Link: CVE-2026-64312

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-07-25T13:15:03Z

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object