A kernel crypto CAAM driver was found to emit hex dumps of sensitive key material during key setting operations when CONFIG_DYNAMIC_DEBUG is enabled. This automatic output can disclose cryptographic keys to anyone with read access to kernel logs or debug output, exposing privileged information without granting any further system control. The weakness corresponds to information exposure (CWE-215).

The vulnerability resides in the Linux kernel, affecting any build that incorporates the CAAM crypto module with CONFIG_DYNAMIC_DEBUG active. No specific kernel versions were listed, implying that all affected kernels prior to the patch may be vulnerable until the fix is applied.

The EPSS score is below 1% and the vulnerability is not currently tracked in CISA KEV, indicating a low likelihood of widespread exploitation at present. An attacker would need to enable or exploit dynamic debugging capabilities, typically requiring local access or privilege to toggle CONFIG_DYNAMIC_DEBUG. The absence of a public exploit reduces immediate concern, yet the potential for accidental key leakage makes remediation prudent.