CVE-2026-43336
medium
Red Hat EPSS Score
0.0%
Exploitation probability in 30 days
Top 86% most likely to be exploited
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's ChaCha cryptographic algorithm implementation. The `permuted_state` local variable, which is sufficient to compute the original cryptographic key, was not properly zeroized before leaving its scope. This oversight could allow an attacker to recover the cryptographic key, leading to information disclosure.
CWE
CWE-212Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9