CVE-2026-46291
Published Jun 8, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in hash_digest_key() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.
EPSS — Exploit Prediction
0.0018
Probability of exploitation
0.07%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/177730a273b18e195263ed953853273e901b5064
https://git.kernel.org/stable/c/2adbfca7452eeac45117b8e803288a2767f7075f
https://git.kernel.org/stable/c/5cffe3c136891aa4d579bf5c079a68f7cb371b0c
https://git.kernel.org/stable/c/b8f12d9b00c1950779e5679b9c13908584682bb6
https://git.kernel.org/stable/c/c7e52fe3f7901ccb9cd29b3f7c683d809ba87e48
Frequently Asked Questions
What is CVE-2026-46291? +
In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - guard HMAC key hex dumps in hash_digest_key
Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in
hash_digest_key() to avoid leaking secrets at runtime when
CONFIG_DYNAMIC_DEBUG is enabled.
How do I check if I'm vulnerable to CVE-2026-46291? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.