In the Linux kernel, the following vulnerability has been resolved:
crypto: starfive - Correctly handle return of sg_nents_for_len
The return value of sg_nents_for_len was assigned to an unsigned long
in starfive_hash_digest, causing negative error codes to be converted
to large positive integers.
Add error checking for sg_nents_for_len and return immediately on
failure to prevent potential buffer overflows.
7883d1b28a2b0e62edcacea22de6b36a1918b15a builds before 6cd14414394b4f3d6e1ed64b8241d1fcc2271820; 7883d1b28a2b0e62edcacea22de6b36a1918b15a builds before 0c3854d65cc4402cb8c52d4d773450a06efecab6; 7883d1b28a2b0e62edcacea22de6b36a1918b15a builds before 1af5c973dd744e29fa22121f43e8646b7a7a71a7; 7883d1b28a2b0e62edcacea22de6b36a1918b15a builds before 9b3f71cf02e04cfaa482155e3078707fe7f8aef4; from 7883d1b28a2b0e62edcacea22de6b36a1918b15a before e9eb52037a529fbb307c290e9951a62dd728b03d
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
