Loading vulnerability…
CVE-2026-43330 is a vulnerability in the Linux kernel crypto CAAM subsystem affecting handling of HMAC keys longer than the algorithm block size. In the affected code path, an oversized HMAC key is first copied and then hashed into the effective key. Because the temporary buffer size must be rounded up to DMA cache alignment, the implementation used a larger aligned length than the original key length. The vulnerable code performed the copy with kmemdup using the aligned allocation length, which caused an out-of-bounds read of the source key buffer by reading aligned_len - keylen bytes past the end of the provided key material. The same logic also created conditions under which the hashed key operation could corrupt adjacent memory if the temporary buffer handling was incorrect. The kernel fix replaces kmemdup with kmalloc followed by memcpy so that only the actual key length is copied while still allocating an alignment-safe buffer.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
10 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Linux kernel CAAM crypto vulnerability involving an overflow with long HMAC keys.
A Linux kernel CAAM crypto subsystem vulnerability involving an overflow/out-of-bounds read when handling long HMAC keys due to improper buffer allocation and copying alignment.
A Linux kernel overflow vulnerability in the crypto caam component when handling long HMAC keys.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.