Description
In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < c256b616067bfd6d274c679c06986b78d2402434affected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < e719c8991c161977a67197775067ab456b518c7baffected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < ebed0d666fa709bae9e8cafa8ec6e7ebd1d318c6affected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < c69a1e4b419c2c466dd8c5602bdebadc353973ddaffected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < 49833a8da6407e7e9b532cc4054fdbcaf78f5fddaffected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < d0f14ae223c2421b334c1f1a9e48f1e809aee3a0affected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < c0082ee420639a97e40cae66778b02b341b005e5affected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < 3b7a40740f04e2f27114dfd6225c5e721dda9d57affected9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to < 2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9affected
Linux Linux
Default version status: affected
4.11affected0 to < 4.11unaffected4.19.316 to ≤ 4.19.*unaffected5.4.278 to ≤ 5.4.*unaffected5.10.219 to ≤ 5.10.*unaffected5.15.161 to ≤ 5.15.*unaffected6.1.93 to ≤ 6.1.*unaffected6.6.33 to ≤ 6.6.*unaffected6.8.12 to ≤ 6.8.*unaffected6.9.3 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c256b616067bfd6d274c679c06986b78d2402434 ↗
- https://git.kernel.org/stable/c/e719c8991c161977a67197775067ab456b518c7b ↗
- https://git.kernel.org/stable/c/ebed0d666fa709bae9e8cafa8ec6e7ebd1d318c6 ↗
- https://git.kernel.org/stable/c/c69a1e4b419c2c466dd8c5602bdebadc353973dd ↗
- https://git.kernel.org/stable/c/49833a8da6407e7e9b532cc4054fdbcaf78f5fdd ↗
- https://git.kernel.org/stable/c/d0f14ae223c2421b334c1f1a9e48f1e809aee3a0 ↗
- https://git.kernel.org/stable/c/c0082ee420639a97e40cae66778b02b341b005e5 ↗
- https://git.kernel.org/stable/c/3b7a40740f04e2f27114dfd6225c5e721dda9d57 ↗
- https://git.kernel.org/stable/c/2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗