Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 before 4897bd307ba8757c31a3325ba6730961be606016; affected 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 before ed8d91f469845d62d44c565a55d2ab1767969357; affected 479e58549b0fa7e80f1e0b9e69e0a2a8e6711132 before 36f46b0e36892eba08978eef7502ff3c94ddba77 |
| Linux / Linux | affected 6.16; unaffected 0 before 6.16; unaffected 6.18.20 through 6.18.*; unaffected 6.19.10 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.