The Linux kernel CAAM crypto driver exposed sensitive key material by dumping it with a generic hex dump routine when CONFIG_DYNAMIC_DEBUG was enabled. This unintended logging can leak private cryptographic keys, compromising the confidentiality of encrypted data. The vulnerability represents a classic information-disclosure flaw involving improper handling of secret data.

The flaw affects any Linux kernel build that includes the CAAM crypto driver and has dynamic debugging enabled. The patch has been released, so upgrading to a kernel containing the fix mitigates the risk.

The vulnerability requires CONFIG_DYNAMIC_DEBUG to be active and an attacker to trigger key set or split operations, which can happen during normal system operation or via crafted input when the CAAM driver processes keys. An attacker with local or privileged kernel access could provoke a diagnostic dump and read the leaked key material from the kernel ring buffer or system logs. The EPSS score is below 1 % and the CVSS score of 5.5 indicates a medium severity; the CVE is not listed in CISA KEV, suggesting low current exploitation probability. Nonetheless, the potential for key exposure remains significant if the conditions above are met.