---
id: CVE-2026-31543
title: 'crash_dump: don''t log dm-crypt key bytes in read_key_from_user_keying'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

  When debug logging is enabled, read_key_from_user_keying() logs the first
  8 bytes of the key payl…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 <
    4897bd307ba8757c31a3325ba6730961be606016
  - >-
    Linux >= 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 <
    ed8d91f469845d62d44c565a55d2ab1767969357
  - >-
    Linux >= 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 <
    36f46b0e36892eba08978eef7502ff3c94ddba77
  - Linux 6.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:38:21.530520Z'
published: '2026-04-24'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:45:07.243Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31543'
references:
  - url: 'https://git.kernel.org/stable/c/4897bd307ba8757c31a3325ba6730961be606016'
  - url: 'https://git.kernel.org/stable/c/ed8d91f469845d62d44c565a55d2ab1767969357'
  - url: 'https://git.kernel.org/stable/c/36f46b0e36892eba08978eef7502ff3c94ddba77'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01905
ingestedAt: '2026-11-05T23:41:31.970Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying

When debug logging is enabled, read_key_from_user_keying() logs the first
8 bytes of the key payload and partially exposes the dm-crypt key.  Stop
logging any key bytes.

## Affected

- `Linux >= 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 < 4897bd307ba8757c31a3325ba6730961be606016`
- `Linux >= 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 < ed8d91f469845d62d44c565a55d2ab1767969357`
- `Linux >= 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 < 36f46b0e36892eba08978eef7502ff3c94ddba77`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.