Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-43815

crypto: mxs-dcp - Ensure payload is zero when using key slot

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stack memory through the payload field when running AES with a key from one of the hardware's key slots. Fix this by ensuring the payload field is set to 0 in such cases. This does not affect the common use case when the key is supplied from main memory via the descriptor payload.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3d16af0b4cfac4b2c3b238e2ec37b38c2f316978 to < e1640fed0377bf7276efb70d03cb821a6931063daffected
  • 3d16af0b4cfac4b2c3b238e2ec37b38c2f316978 to < dd52b5eeb0f70893f762da7254e923fd23fd1379affected

Linux Linux

Default version status: affected

  • 6.10affected
  • 0 to < 6.10unaffected
  • 6.10.3 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References