crypto: caam - fix overflow on long hmac keys
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 0.1%
probabilidad de explotación
0.1%top 97% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
crypto: caam - fix overflow on long hmac keys
When a key longer than block size is supplied, it is copied and then
hashed into the real key. The memory allocated for the copy needs to
be rounded to DMA cache alignment, as otherwise the hashed key may
corrupt neighbouring memory.
The copying is performed using kmemdup, however this leads to an overflow:
reading more bytes (aligned_len - keylen) from the keylen source buffer.
Fix this by replacing kmemdup with kmalloc, followed by memcpy.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Linux · LinuxReferencias
https://git.kernel.org/stable/c/31022cfde5235c45fa765f0aabeff5f0652852f2https://git.kernel.org/stable/c/80688afb9c35b3934ce2d6be9973758915e2e0efhttps://git.kernel.org/stable/c/aa545df011338df13f0833fc1fabcb15c0521959https://git.kernel.org/stable/c/c2fb4984fe09fc176fe4c12d5e3edf626df6511dhttps://git.kernel.org/stable/c/cebc5ebd958346195b77f42d0cd5141b4e448fae