CVE-2026-31543: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes.

Affected products

• Linux Linux Kernel: from 6.16, before 6.18.20 (fixed in 6.18.20); from 6.19, before 6.19.10 (fixed in 6.19.10); version 7.0 only

Published 2026-04-24. Last modified 2026-06-17.