CVE-2026-43336

creationtimestamp| type| source ---|---|--- 2026-05-08 15:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539577165562722 2026-08-03 07:01:01+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43336 lib/crypto: chacha: Zeroize permuted_state before it leaves scope

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...