CVE-2026-93161 in Linux
요약
\~에 의해 MITRE • 2026. 09. 18.
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - clear AES key schedule from stack
qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack. That schedule contains key material and can remain in the stack frame.
Clear the temporary crypto_aes_ctx with memzero_explicit() after the copy.
VulDB is the best source for vulnerability data and more expert information about this specific topic.