Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If a RESPONSE packet gets a temporary failure during processing, it may end up in a partially decrypted state - and then get requeued for a retry. Fix this by just discarding the packet; we will send another CHALLENGE packet and thereby elicit a further response. Similarly, discard an incoming CHALLENGE packet if we get an error whilst generating a RESPONSE; the server will send another CHALLENGE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
17926a79320afa9b95df6b977b40cca6d8713cea to < d61482be4aae1835b78875761206241835a7510eaffected17926a79320afa9b95df6b977b40cca6d8713cea to < 7b89868305052b94a91b708c462bc2281fa42a4aaffected17926a79320afa9b95df6b977b40cca6d8713cea to < 76cb9a2d252274adfae6e293a292434631a7d472affected17926a79320afa9b95df6b977b40cca6d8713cea to < f55b383070170e988e4dec28be2af1714d258521affected17926a79320afa9b95df6b977b40cca6d8713cea to < 0422e7a4883f25101903f3e8105c0808aa5f4ce9affected
Linux Linux
Default version status: affected
2.6.22affected0 to < 2.6.22unaffected6.6.140 to ≤ 6.6.*unaffected6.12.86 to ≤ 6.12.*unaffected6.18.27 to ≤ 6.18.*unaffected7.0.4 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d61482be4aae1835b78875761206241835a7510e ↗
- https://git.kernel.org/stable/c/7b89868305052b94a91b708c462bc2281fa42a4a ↗
- https://git.kernel.org/stable/c/76cb9a2d252274adfae6e293a292434631a7d472 ↗
- https://git.kernel.org/stable/c/f55b383070170e988e4dec28be2af1714d258521 ↗
- https://git.kernel.org/stable/c/0422e7a4883f25101903f3e8105c0808aa5f4ce9 ↗