Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer after use I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding cryptographic information should be zeroized once they are no longer needed. Accomplish this by using kfree_sensitive for buffers that previously held the private key.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 06817176784f620984200dc5d7cbe16984f7b262 before 89b9b6fa4463daf820e6a5ef65c3b0c2db239513; affected 06817176784f620984200dc5d7cbe16984f7b262 before b716e9c3603ee95ed45e938fe47227d22cf3ec35; affected 06817176784f620984200dc5d7cbe16984f7b262 before 9db8c299a521813630fcb4154298cb60c37f3133; affected 06817176784f620984200dc5d7cbe16984f7b262 before 71dd428615375e36523f4d4f7685ddd54113646d; affected 06817176784f620984200dc5d7cbe16984f7b262 before 28c8d274848feba552e95c5c2a7e3cfe8f15c534; affected 06817176784f620984200dc5d7cbe16984f7b262 before b502d4a08875ea2b4ea5d5b28dc7c991c8b90cfb; affected 06817176784f620984200dc5d7cbe16984f7b262 before f58679996a831754a356974376f248aa0af2eb8e; affected 06817176784f620984200dc5d7cbe16984f7b262 before 23e4099bdc3c8381992f9eb975c79196d6755210 |
| Linux / Linux | affected 2.6.23; unaffected 0 before 2.6.23; unaffected 4.19.323 through 4.19.*; unaffected 5.4.285 through 5.4.*; unaffected 5.10.222 through 5.10.*; unaffected 5.15.163 through 5.15.*; unaffected 6.1.98 through 6.1.*; unaffected 6.6.39 through 6.6.*; unaffected 6.9.9 through 6.9.*; unaffected 6.10 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/89b9b6fa4463daf820e6a5ef65c3b0c2db239513
- https://git.kernel.org/stable/c/b716e9c3603ee95ed45e938fe47227d22cf3ec35
- https://git.kernel.org/stable/c/9db8c299a521813630fcb4154298cb60c37f3133
- https://git.kernel.org/stable/c/71dd428615375e36523f4d4f7685ddd54113646d
- https://git.kernel.org/stable/c/28c8d274848feba552e95c5c2a7e3cfe8f15c534
- https://git.kernel.org/stable/c/b502d4a08875ea2b4ea5d5b28dc7c991c8b90cfb
- https://git.kernel.org/stable/c/f58679996a831754a356974376f248aa0af2eb8e
- https://git.kernel.org/stable/c/23e4099bdc3c8381992f9eb975c79196d6755210
ADP enrichment
No English description supplied.
- https://git.kernel.org/stable/c/9db8c299a521813630fcb4154298cb60c37f3133
- https://git.kernel.org/stable/c/71dd428615375e36523f4d4f7685ddd54113646d
- https://git.kernel.org/stable/c/28c8d274848feba552e95c5c2a7e3cfe8f15c534
- https://git.kernel.org/stable/c/b502d4a08875ea2b4ea5d5b28dc7c991c8b90cfb
- https://git.kernel.org/stable/c/f58679996a831754a356974376f248aa0af2eb8e
- https://git.kernel.org/stable/c/23e4099bdc3c8381992f9eb975c79196d6755210
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
No English description supplied.
No references supplied.