Description
In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_nents_for_len The return value of sg_nents_for_len was assigned to an unsigned long in starfive_hash_digest, causing negative error codes to be converted to large positive integers. Add error checking for sg_nents_for_len and return immediately on failure to prevent potential buffer overflows.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7883d1b28a2b0e62edcacea22de6b36a1918b15a to < 6cd14414394b4f3d6e1ed64b8241d1fcc2271820affected7883d1b28a2b0e62edcacea22de6b36a1918b15a to < 0c3854d65cc4402cb8c52d4d773450a06efecab6affected7883d1b28a2b0e62edcacea22de6b36a1918b15a to < 1af5c973dd744e29fa22121f43e8646b7a7a71a7affected7883d1b28a2b0e62edcacea22de6b36a1918b15a to < 9b3f71cf02e04cfaa482155e3078707fe7f8aef4affected7883d1b28a2b0e62edcacea22de6b36a1918b15a to < e9eb52037a529fbb307c290e9951a62dd728b03daffected
Linux Linux
Default version status: affected
6.5affected0 to < 6.5unaffected6.6.120 to ≤ 6.6.*unaffected6.12.63 to ≤ 6.12.*unaffected6.17.13 to ≤ 6.17.*unaffected6.18.2 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6cd14414394b4f3d6e1ed64b8241d1fcc2271820 ↗
- https://git.kernel.org/stable/c/0c3854d65cc4402cb8c52d4d773450a06efecab6 ↗
- https://git.kernel.org/stable/c/1af5c973dd744e29fa22121f43e8646b7a7a71a7 ↗
- https://git.kernel.org/stable/c/9b3f71cf02e04cfaa482155e3078707fe7f8aef4 ↗
- https://git.kernel.org/stable/c/e9eb52037a529fbb307c290e9951a62dd728b03d ↗