Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests AF_ALG AEAD AIO requests currently use the socket-wide IV buffer during request processing. For async requests, later socket activity can update that shared state before the original request has fully completed, which can lead to inconsistent IV handling. Snapshot the IV into per-request storage when preparing the AEAD request, so in-flight operations no longer depend on mutable socket state.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 08ea39a556ecd39b33c2b4888861001c6706a62eaffectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < a920cabdb0b7cf1f4e11a20524253ae5bd09092baffectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < fa0fcec9b49d58e71df7ede91ecd86855f608e85affectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < c2138c9bd02af19e0b407376140cd5435b0d81daaffectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 46fdb39e83227b5d39f7c934a0947ea913f13c18affectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < ebc235675f24b0e3f8bc92b8419471d42f837d8faffectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 3d72f8c6490dc79210b64270740cb2a8619361a4affectedd887c52d6ae43aeebd249b5f2f1333e60236aa60 to < 5aa58c3a572b3e3b6c786953339f7978b845cc52affected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.10.254 to ≤ 5.10.*unaffected5.15.204 to ≤ 5.15.*unaffected6.1.170 to ≤ 6.1.*unaffected6.6.137 to ≤ 6.6.*unaffected6.12.85 to ≤ 6.12.*unaffected6.18.27 to ≤ 6.18.*unaffected7.0.4 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/08ea39a556ecd39b33c2b4888861001c6706a62e ↗
- https://git.kernel.org/stable/c/a920cabdb0b7cf1f4e11a20524253ae5bd09092b ↗
- https://git.kernel.org/stable/c/fa0fcec9b49d58e71df7ede91ecd86855f608e85 ↗
- https://git.kernel.org/stable/c/c2138c9bd02af19e0b407376140cd5435b0d81da ↗
- https://git.kernel.org/stable/c/46fdb39e83227b5d39f7c934a0947ea913f13c18 ↗
- https://git.kernel.org/stable/c/ebc235675f24b0e3f8bc92b8419471d42f837d8f ↗
- https://git.kernel.org/stable/c/3d72f8c6490dc79210b64270740cb2a8619361a4 ↗
- https://git.kernel.org/stable/c/5aa58c3a572b3e3b6c786953339f7978b845cc52 ↗