Description
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmel_ecdh_compute_shared_secret() uses the private key stored in the device. However, the public key is cached only after atmel_ecdh_set_secret() successfully generated that private key for the current tfm. atmel_ecdh_generate_public_key() already rejects requests when no public key is cached. Add the same check to atmel_ecdh_compute_shared_secret() to prevent the device from using a private key that was not generated for the current tfm.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
11105693fa05f499532b330da65c78ff93ed4440 to < 5e33791dfcc6459e402a524669093cd953d5b2dfaffected11105693fa05f499532b330da65c78ff93ed4440 to < 33241f198287960bba5fc2251400896762650bfaaffected11105693fa05f499532b330da65c78ff93ed4440 to < 3ea8b780d68f02fe235c5051ce8ac4b4940b9259affected11105693fa05f499532b330da65c78ff93ed4440 to < 6457162f74f45284ade2da644a4f0c54758ac0a6affected11105693fa05f499532b330da65c78ff93ed4440 to < 2b40bab362d2b598f34e5ccd4694cedc3c2553d4affected11105693fa05f499532b330da65c78ff93ed4440 to < e64d6f1aae8c837cb3f0446bf44108226d7370f4affected11105693fa05f499532b330da65c78ff93ed4440 to < add28e9988902d29ea93f4869280b4a16a049ea5affected11105693fa05f499532b330da65c78ff93ed4440 to < f240f9b588f4e2de89822adebf560a96b5d263edaffected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5e33791dfcc6459e402a524669093cd953d5b2df ↗
- https://git.kernel.org/stable/c/33241f198287960bba5fc2251400896762650bfa ↗
- https://git.kernel.org/stable/c/3ea8b780d68f02fe235c5051ce8ac4b4940b9259 ↗
- https://git.kernel.org/stable/c/6457162f74f45284ade2da644a4f0c54758ac0a6 ↗
- https://git.kernel.org/stable/c/2b40bab362d2b598f34e5ccd4694cedc3c2553d4 ↗
- https://git.kernel.org/stable/c/e64d6f1aae8c837cb3f0446bf44108226d7370f4 ↗
- https://git.kernel.org/stable/c/add28e9988902d29ea93f4869280b4a16a049ea5 ↗
- https://git.kernel.org/stable/c/f240f9b588f4e2de89822adebf560a96b5d263ed ↗