Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c9839143ebbf5e821128da44f7e271d745aab19e before e7f979ed51f96495328157df663c835b17db1e30; affected c9839143ebbf5e821128da44f7e271d745aab19e before 76c9216833e7c20a67c987cf89719a3f01666aaa; affected c9839143ebbf5e821128da44f7e271d745aab19e before 2acbb8771f6ac82422886e63832ee7a0f4b1635b |
| Linux / Linux | affected 4.8; unaffected 0 before 4.8; unaffected 5.15.58 through 5.15.*; unaffected 5.18.15 through 5.18.*; unaffected 5.19 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30
- https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa
- https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b
ADP enrichment
No English description supplied.
No references supplied.