Description
In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d58bb7e55a8a65894cc02f27c3e2bf9403e7c40f to < 0c3687822259a7628c85cd21a3445cbe3c367165affectedd58bb7e55a8a65894cc02f27c3e2bf9403e7c40f to < 2bb86817b33c9d704e127f92b838035a72c315b6affectedd58bb7e55a8a65894cc02f27c3e2bf9403e7c40f to < bb44477d4506e52785693a39f03cdc6a2c5e8598affectedd58bb7e55a8a65894cc02f27c3e2bf9403e7c40f to < 7ebf812b7019fd2d4d5a7ca45ef4bf3a6f4bda0aaffectedd58bb7e55a8a65894cc02f27c3e2bf9403e7c40f to < 7abdfd45a650c714d5ebab564bb1b988f14d9b49affectedd58bb7e55a8a65894cc02f27c3e2bf9403e7c40f to < ba3c5574203034781ac4231acf117da917efcd2aaffected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.10.210 to ≤ 5.10.*unaffected5.15.149 to ≤ 5.15.*unaffected6.1.79 to ≤ 6.1.*unaffected6.6.15 to ≤ 6.6.*unaffected6.7.3 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0c3687822259a7628c85cd21a3445cbe3c367165 ↗
- https://git.kernel.org/stable/c/2bb86817b33c9d704e127f92b838035a72c315b6 ↗
- https://git.kernel.org/stable/c/bb44477d4506e52785693a39f03cdc6a2c5e8598 ↗
- https://git.kernel.org/stable/c/7ebf812b7019fd2d4d5a7ca45ef4bf3a6f4bda0a ↗
- https://git.kernel.org/stable/c/7abdfd45a650c714d5ebab564bb1b988f14d9b49 ↗
- https://git.kernel.org/stable/c/ba3c5574203034781ac4231acf117da917efcd2a ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗