CVE-2026-64314
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: chacha20poly1305 - validate poly1305 template argument<br />
<br />
chachapoly_create() still accepts the compatibility poly1305 parameter<br />
in the template name, but it assumes the second template argument is<br />
always present and immediately passes it to strcmp().<br />
<br />
When the argument is missing, crypto_attr_alg_name() returns an error<br />
pointer. Check for that before comparing the name so malformed template<br />
instantiations fail with an error instead of dereferencing the error<br />
pointer in strcmp().<br />
<br />
This matches the surrounding Crypto API template pattern where<br />
crypto_attr_alg_name() results are validated before string-specific use.



