CVE-2026-93161 is a vulnerability in Linux Kernel
Published on September 17, 2026
crypto: qat - clear AES key schedule from stack
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - clear AES key schedule from stack
qat_alg_xts_reverse_key() expands the forward XTS AES key on the stack.
That schedule contains key material and can remain in the stack frame.
Clear the temporary crypto_aes_ctx with memzero_explicit() after the copy.
Products Associated with CVE-2026-93161
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below b9cf42622b30178f554fa74411eec67e02d70411 is affected.
- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below fb1194b78a163cc56bb9480c707fc34b53522359 is affected.
- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below 892f34dc1819cceb8841005a68086710ce3763b6 is affected.
- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below dcaa0f1e86cbcb01f68131ae907b54cf299a3592 is affected.
- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below 9af019e213ada5c3d0d33c515071a1414b6899f3 is affected.
- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below 92e4979e1a770860b26aa3d90cce0c4c6a53833c is affected.
- Version 5106dfeaeabea73d5132daab1d89d57b57fa98b7 and below d41a9fcfb7f9ee36e4a4aaf5e7996bca6be1e7a9 is affected.
- Version 5.11 is affected.
- Before 5.11 is unaffected.
- Version 5.15.221, <= 5.15.* is unaffected.
- Version 6.1.188, <= 6.1.* is unaffected.
- Version 6.6.157, <= 6.6.* is unaffected.
- Version 6.12.110, <= 6.12.* is unaffected.
- Version 6.18.52, <= 6.18.* is unaffected.
- Version 7.2.6, <= 7.2.* is unaffected.
- Version 7.3-rc1, <= * is unaffected.