Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64314

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapoly_create() still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediately passes it to strcmp(). When the argument is missing, crypto_attr_alg_name() returns an error pointer. Check for that before comparing the name so malformed template instantiations fail with an er
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ec2f635ae45a9fdea1487e017502a0dbdf4f83fa276b8ff9bc0540a4addd7ee7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["crypto/chacha20poly1305.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc1","versionType":"original_commit_for_fix…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["crypto/chacha20poly1305.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0016d3c21c6ab60a20be7f565cefb5999f3adeb6","status":"affected","version":"a298765e28adaea199f722142c10dae7e24dedf8","versionType":"git"},{"lessThan":"e74df53b36cdc6b6b9e5488ec883d1d55624737f","status":"affected","version":"a298765e28adaea199f722142c10dae7e24dedf8","versionType":"git"},{"lessThan":"265b861bece38318b8e0fc8fac0643d4ef906d31","status":"affected","version":"a298765e28adaea199f7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["crypto/chacha20poly1305.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2-rc1","versionType":"original_commit_for_fix…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["crypto/chacha20poly1305.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0016d3c21c6ab60a20be7f565cefb5999f3adeb6","status":"affected","version":"a298765e28adaea199f722142c10dae7e24dedf8","versionType":"git"},{"lessThan":"e74df53b36cdc6b6b9e5488ec883d1d55624737f","status":"affected","version":"a298765e28adaea199f722142c10dae7e24dedf8","versionType":"git"},{"lessThan":"265b861bece38318b8e0fc8fac0643d4ef906d31","status":"affected","version":"a298765e28adaea199f7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/affected/0

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/0016d3c21c6ab60a20be7f565cefb5999f3adeb6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/265b861bece38318b8e0fc8fac0643d4ef906d31"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e74df53b36cdc6b6b9e5488ec883d1d55624737f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5a734d207d595e8cffacd51fbe823c529adaac866ad924e27b21b04d177e1e66 · sha256:80c78af50415403a… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer