{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"4897bd307ba8757c31a3325ba6730961be606016","status":"affected","version":"479e58549b0fa7e80f1e0b9e69e0a2a8e6711132","versionType":"git"},{"lessThan":"ed8d91f469845d62d44c565a55d2ab1767969357","status":"affected","version":"479e58549b0fa7e80f1e0b9e69e0a2a8e6711132","versionType":"git"},{"lessThan":"36f46b0e36892eba08978eef7502ff3c94ddba77","status":"affected","version":"479e58549b0fa7e80f1e0b9e69e0a2a8e6711132","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.20","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-31543","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrash_dump: don't log dm-crypt key bytes in read_key_from_user_keying\n\nWhen debug logging is enabled, read_key_from_user_keying() logs the first\n8 bytes of the key payload and partially exposes the dm-crypt key.  Stop\nlogging any key bytes.","epss":{"date":"2026-11-05","percentile":0.01897,"score":0.00121},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793915107243,"publishedAt":1777041192163,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4897bd307ba8757c31a3325ba6730961be606016"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ed8d91f469845d62d44c565a55d2ab1767969357"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/36f46b0e36892eba08978eef7502ff3c94ddba77"}],"remediation":[],"revision":"99a7e0d20e893c5e80d2b848afcc1e692faefb108b2c764b94f8e1f1caa4487b","sources":[{"modifiedAt":1793915107243,"name":"CNA: Linux","retrievedAt":1793917092912,"url":"https://www.cve.org/CVERecord?id=CVE-2026-31543"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793917102192,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-31543"}],"ssvc":{"assessedAt":1793914701530,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying","updatedAt":1793917102192}