The Linux kernel CAAM crypto driver logged sensitive key material using the generic hex dump routine when CONFIG_DYNAMIC_DEBUG is active. This unintended exposure allows an attacker to capture private keys from the kernel output, compromising cryptographic security. The flaw is an information‑disclosure weakness involving improper handling of secret data.

This deficiency affects Linux kernel builds that include the CAAM crypto driver and have dynamic debugging enabled. The specific affected kernel versions are not listed, so any kernel containing the original code until the patch is applied is at risk.

The pathology arises from enabling CONFIG_DYNAMIC_DEBUG and triggering key set or split operations. A local or privileged attacker who can execute code in the kernel context would be able to provoke the diagnostic dump and read it from the kernel ring buffer. Nonetheless, the precise attack scenario is not explicitly described in the advisory; it is inferred from the fact that a debug routine is used to print key contents. The EPSS score is below 1 % and the vulnerability is not in the CISA KEV catalog, suggesting a low current exploitation probability. However, the information leakage remains significant if the conditions above are met.