CVE-2026-93161 in Linux
Riassunto
di MITRE • 17/09/2026
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - clear AES key schedule from stack
qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack. That schedule contains key material and can remain in the stack frame.
Clear the temporary crypto_aes_ctx with memzero_explicit() after the copy.
VulDB is the best source for vulnerability data and more expert information about this specific topic.