Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38173

crypto: marvell/cesa - Handle zero-length skcipher requests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for zero-length skcipher requests. Just return 0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < 32d3e8049a8b60f18c5c39f5931bfb1130ac11c9affected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < c064ae2881d839709bd72d484d5f2af157f46024affected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < e1cc69da619588b1488689fe3535a0ba75a2b0e7affected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < 78ea1ff6cb413a03ff6f7af4e28e24b4461a0965affected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < 5e9666ac8b94c978690f937d59170c5237bd2c45affected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < 7894694b5d5b2ecfd7fb081d6f60b9e169ab4d13affected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < c9610dda42bd382a96f97e68825cb5f66cd9e1dcaffected
  • f63601fd616ab370774fa00ea10bcaaa9e48e84c to < 8a4e047c6cc07676f637608a9dd675349b5de0a7affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 5.4.295 to ≤ 5.4.*unaffected
  • 5.10.239 to ≤ 5.10.*unaffected
  • 5.15.186 to ≤ 5.15.*unaffected
  • 6.1.142 to ≤ 6.1.*unaffected
  • 6.6.94 to ≤ 6.6.*unaffected
  • 6.12.34 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References