Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the size of the maximum length of the cryptographic primitive instead of caller provided size.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before 622ec2dcd59f21623f2a7ab773c80ceb7d555e3a; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before b1e247338bc71826a2d2def3e0874c34749df69a; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before 0f3058d7d26f81df9b68a18ddbe164bdc3c5eff3; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before 5966e4e2ba213ab7ad559166152eb4f1f170dd2c; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before 5165f1cc727f1322456735df212d8e26ec237a8d; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before b11c1fa32667692a2c0566e10163758e786e430c; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before 670fc6a311ed321522b7fff92cf0fc376b4f6e78; affected 00d60fd3b93219ea854220f0fd264b86398cbc53 before cb481e59ea6cae3b7796ac1d7a22b6b24c3f3c0b |
| Linux / Linux | affected 4.20; unaffected 0 before 4.20; unaffected 5.10.260 through 5.10.*; unaffected 5.15.211 through 5.15.*; unaffected 6.1.177 through 6.1.*; unaffected 6.6.144 through 6.6.*; unaffected 6.12.95 through 6.12.*; unaffected 6.18.38 through 6.18.*; unaffected 7.1.3 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/622ec2dcd59f21623f2a7ab773c80ceb7d555e3a
- https://git.kernel.org/stable/c/b1e247338bc71826a2d2def3e0874c34749df69a
- https://git.kernel.org/stable/c/0f3058d7d26f81df9b68a18ddbe164bdc3c5eff3
- https://git.kernel.org/stable/c/5966e4e2ba213ab7ad559166152eb4f1f170dd2c
- https://git.kernel.org/stable/c/5165f1cc727f1322456735df212d8e26ec237a8d
- https://git.kernel.org/stable/c/b11c1fa32667692a2c0566e10163758e786e430c
- https://git.kernel.org/stable/c/670fc6a311ed321522b7fff92cf0fc376b4f6e78
- https://git.kernel.org/stable/c/cb481e59ea6cae3b7796ac1d7a22b6b24c3f3c0b
ADP enrichment
No English description supplied.
No references supplied.